Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d/25096 - http://www.securityfocus.com/archive/1/474815/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35651 - http://securityreason.com/securityalert/2951
CVE ID: CVE-2007-4117 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the PN_PathPrefix parameter. NOTE: this issue is disputed by a reliable third party, who demonstrates that PN_PathPrefix is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-July/001744.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35690 - http://www.securityfocus.com/archive/1/475095/100/0/thr
l - https://exchange.xforce.ibmcloud.com/vulnerabilities/35690 - http://www.securityfocus.com/archive/1/475095/100/0/threaded - http://securityreason.com/securityalert/2940
CVE ID: CVE-2007-4118 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.inc.php in phpVoter 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2939 - http://osvdb.org/39030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35691 - http://www.securityfocus.com/archive/1/475100/100/0/threaded
CVE ID: CVE-2007-4119 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:39.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2761 - http://securityreason.com/securityalert/2943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35684 - http://secunia.com/advisories/26371 - http://www.securityfocus.com/bid/25109 - http://www.securityfocus.com/archive/1/4749
tp://secunia.com/advisories/26371 - http://www.securityfocus.com/bid/25109 - http://www.securityfocus.com/archive/1/474930/100/0/threaded
CVE ID: CVE-2007-4120 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) classfile parameter to includes/functions.php, the (2) nextitem parameter to includes/functions_cron.php, and the (3) specialtemplates parameter to includes/functions_forumdisplay.php. NOTE: this issue is disputed by a reliable third party who states "further investigation has revealed that the application is not vulnerable to this issue." The original researcher also has a his
investigation has revealed that the application is not vulnerable to this issue." The original researcher also has a history of erroneous claims Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25141 - http://www.securityfocus.com/archive/1/475151/100/0/threaded - http://securityreason.com/securityalert/2941 - http://www.securityfocus.com/archive/1/475105/100/0/threaded
CVE ID: CVE-2007-4121 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:39.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the (1) EmailAdd (Username) and (2) Pass (password) parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35680 - http://outlaw.aria-security.info/?p=11 - http://www.securityfocus.
/exchange.xforce.ibmcloud.com/vulnerabilities/35680 - http://outlaw.aria-security.info/?p=11 - http://www.securityfocus.com/archive/1/475062/100/0/threaded - http://securityreason.com/securityalert/2944 - http://www.securityfocus.com/bid/25125 - http://secunia.com/advisories/26277
CVE ID: CVE-2007-4122 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer (HV) 06-00 through 06-71-/B allows remote attackers to cause a denial of service (application stop and web interface outage) via certain "unexpected data." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25144 - http://www.hitachi-support.com/security_e/vuls_e/HS07-021_e/index-e.html - http://osvdb.org/37853 - http://www.vupen.com/english/advisories/2007/2722 - http://secunia.com/advisories/26242 - https://exchang
db.org/37853 - http://www.vupen.com/english/advisories/2007/2722 - http://secunia.com/advisories/26242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35703
CVE ID: CVE-2007-4123 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35707 - http://www.hitachi-support.com/security_e/vuls_e/HS07-023_e/index-e.html - http://www.vupen.com/english/advisories/2007/2724 - http
hitachi-support.com/security_e/vuls_e/HS07-023_e/index-e.html - http://www.vupen.com/english/advisories/2007/2724 - http://osvdb.org/46972
CVE ID: CVE-2007-4124 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the wrong user under unspecified conditions, which might allow remote authenticated users to obtain sensitive information, corrupt another user's session data, and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25145 - http://www.vupen.com/english/advisories/2007/2725 - https://exch
References: - http://www.securityfocus.com/bid/25145 - http://www.vupen.com/english/advisories/2007/2725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35706 - http://osvdb.org/37852 - http://secunia.com/advisories/26250 - http://www.hitachi-support.com/security_e/vuls_e/HS07-024_e/index-e.html
CVE ID: CVE-2007-4125 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause an unspecified denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25147 - http://secunia.com/advisories/26279 - http://www.securitytracker.com/id?1018482 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5243 - http://h20000.www2.hp.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5243 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01087206 - http://www.vupen.com/english/advisories/2007/2728 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01087206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35702
CVE ID: CVE-2007-4126 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:39.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the dynamic tracing framework (DTrace) on Sun Solaris 10 before 20070730 allows local users with PRIV_DTRACE_USER privileges to cause a denial of service (panic or hang) via unspecified use of certain DTrace programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25151 - http://osvdb.org/36613 - http://www.vupen.com/english/advisories/2007/2729 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103021-1 - http://secunia.com/advisories/2628
ories/2007/2729 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103021-1 - http://secunia.com/advisories/26280 - http://www.securitytracker.com/id?1018484 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9039 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35700
CVE ID: CVE-2007-4127 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:39.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in check_entry.php in Ralf Image Gallery (RIG), aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir_abs_src parameter. NOTE: this issue is disputed by multiple third parties, who report that the product exits if register_globals is enabled, thereby blocking exploitation. NOTE: CVE-2006-3210.a covers this issue in versions before 1.0 Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/sec
ue in versions before 1.0 Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2938 - http://www.attrition.org/pipermail/vim/2007-July/001747.html - http://www.securityfocus.com/archive/1/475094/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-July/001748.html - http://osvdb.org/46973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35689 - http://www.attrition.org/pipermail/vim/2007-July/001749.html - http://www.attrition.org/pipermail/vim/2007-July/001743.html
CVE ID: CVE-2007-4128 State: PUBLISHED Published: 2007-08-01T16:00:00 Last Updated: 2024-08-07T14:46:38.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Firestorm Technologies GMaps (com_gmaps) 1.00 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mapId parameter in a viewmap action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2745 - http://osvdb.org/39192 - https://www.exploit-db.com/exploits/4248 - http://firestorm-technologies.com/ - http://www.securityfocus.com/bid/25146 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
irestorm-technologies.com/ - http://www.securityfocus.com/bid/25146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35701
CVE ID: CVE-2007-4129 State: PUBLISHED Published: 2007-11-08T11:00:00 Last Updated: 2024-08-07T14:46:39.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38330 - http://www.redhat.com/support/errata/RHSA-2007-0631.html - http://osvdb.org/40435 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11413 - https://bugzilla.redhat.com/show_bug.cgi?id=251774 - http://secunia.com/advisories/27591 -
g.mitre.oval%3Adef%3A11413 - https://bugzilla.redhat.com/show_bug.cgi?id=251774 - http://secunia.com/advisories/27591 - http://www.securityfocus.com/bid/26369
CVE ID: CVE-2007-4130 State: PUBLISHED Published: 2008-02-04T23:00:00 Last Updated: 2024-08-07T14:46:38.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NUMA memory access, which allows local users to cause a denial of service (panic) via invalid arguments to set_mempolicy in an MPOL_BIND operation. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11437 - http://www.securityfocus.com/bid/27556 - http://secunia.com/advisories/28748 - https:/
%3Aorg.mitre.oval%3Adef%3A11437 - http://www.securityfocus.com/bid/27556 - http://secunia.com/advisories/28748 - https://bugzilla.redhat.com/show_bug.cgi?id=179665 - http://rhn.redhat.com/errata/RHSA-2008-0055.html
CVE ID: CVE-2007-4131 State: PUBLISHED Published: 2007-08-25T00:00:00 Last Updated: 2024-08-07T14:46:38.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018599 - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021680.1-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-383.htm - http://secunia.com/advisories/26673 - ht
77-1021680.1-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-383.htm - http://secunia.com/advisories/26673 - http://secunia.com/advisories/26822 - http://www.vupen.com/english/advisories/2007/4238 - http://www.us-cert.gov/cas/techalerts/TA07-352A.html - http://secunia.com/advisories/26655 - http://secunia.com/advisories/27453 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00370.html - http://secunia.com/advisories/28136 - http://secunia.com/advisories/26781 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=251921 - http://www.debian.org/security/2007/dsa-1438 - http://secunia.com/advisories/26590 - https://oval.cisecurity.org/repository/search/definiti
rg/security/2007/dsa-1438 - http://secunia.com/advisories/26590 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10420 - http://secunia.com/advisories/27861 - http://www.vupen.com/english/advisories/2007/2958 - https://issues.rpath.com/browse/RPL-1631 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:173 - http://security.FreeBSD.org/advisories/FreeBSD-SA-07:10.gtar.asc - http://secunia.com/advisories/26984 - http://www.securityfocus.com/archive/1/477865/100/0/threaded - http://www.trustix.org/errata/2007/0026/ - http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.novell.com/linux/security/advisories/2007_1
sts.apple.com/archives/security-announce/2007/Dec/msg00002.html - http://www.novell.com/linux/security/advisories/2007_18_sr.html - http://secunia.com/advisories/26604 - http://www.ubuntu.com/usn/usn-506-1 - http://secunia.com/advisories/28255 - http://secunia.com/advisories/26573 - http://www.redhat.com/support/errata/RHSA-2007-0860.html - http://docs.info.apple.com/article.html?artnum=307179 - http://secunia.com/advisories/26603 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7779 - http://www.securityfocus.com/bid/25417 - http://security.gentoo.org/glsa/glsa-200709-09.xml - http://www.securityfocus.com/archive/1/477731/100/0/threaded - http://secun
ecurity.gentoo.org/glsa/glsa-200709-09.xml - http://www.securityfocus.com/archive/1/477731/100/0/threaded - http://secunia.com/advisories/26674
CVE ID: CVE-2007-4132 State: PUBLISHED Published: 2007-08-30T22:00:00 Last Updated: 2024-08-07T14:46:38.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitrary code via unknown vectors in a "back-end XMLRPC handler." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/40438 - http://www.securityfocus.com/bid/25490 - http://secunia.com/advisories/26687 - http://www.redhat.com/support/errata/RHSA-2007-0868.html - http://www.securitytracker.com/id?1018626
CVE ID: CVE-2007-4133 State: PUBLISHED Published: 2007-10-04T23:00:00 Last Updated: 2024-08-07T14:46:38.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0940.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.19-rc4 - http://secunia.com/advisories/2
7-0940.html - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.19-rc4 - http://secunia.com/advisories/27322 - http://secunia.com/advisories/26994 - http://www.debian.org/security/2008/dsa-1504 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:216 - http://www.ubuntu.com/usn/usn-558-1 - http://www.debian.org/security/2007/dsa-1381 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:105 - http://tree.celinuxforum.org/gitstat/commit-detail.php?commit=856fc29505556cf263f3dcda2533cf3766c14ab6 - http://www.securityfocus.com/bid/25904 - http://secunia.com/advisories/29058 - http://secunia.com/ad
a2533cf3766c14ab6 - http://www.securityfocus.com/bid/25904 - http://secunia.com/advisories/29058 - http://secunia.com/advisories/28971 - http://secunia.com/advisories/28170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36925 - http://www.ubuntu.com/usn/usn-578-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10451
CVE ID: CVE-2007-4134 State: PUBLISHED Published: 2007-08-30T22:00:00 Last Updated: 2024-08-07T14:46:39.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200710-23.xml - http://secunia.com/advisories/26626 - http://support.avaya.com/elmodocs2/security/ASA-2007-414.htm - http://secunia.com/advisories/26673 - http://www.securityfocus.com/archive/1/4787
/elmodocs2/security/ASA-2007-414.htm - http://secunia.com/advisories/26673 - http://www.securityfocus.com/archive/1/478797/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11098 - http://www.redhat.com/support/errata/RHSA-2007-0873.html - http://secunia.com/advisories/26857 - https://issues.rpath.com/browse/RPL-1669 - https://bugs.gentoo.org/show_bug.cgi?id=189690 - http://securitytracker.com/id?1018646 - ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc - http://secunia.com/advisories/26672 - ftp://ftp.berlios.de/pub/star/alpha/AN-1.5a84 - http://www.redhat.com/archives/fedora-package-announce/2007-August/msg004
tp://ftp.berlios.de/pub/star/alpha/AN-1.5a84 - http://www.redhat.com/archives/fedora-package-announce/2007-August/msg00425.html - http://secunia.com/advisories/27544 - http://secunia.com/advisories/27318
CVE ID: CVE-2007-4135 State: PUBLISHED Published: 2007-09-05T01:00:00 Last Updated: 2024-08-07T14:46:38.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27043 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9864 - http://www.redhat.com/support/errata/RHSA-2007-0951.
g/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9864 - http://www.redhat.com/support/errata/RHSA-2007-0951.html - http://www.novell.com/linux/security/advisories/2007_18_sr.html - http://www.securityfocus.com/bid/26767 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:240 - http://osvdb.org/45825 - http://secunia.com/advisories/26674 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36396
CVE ID: CVE-2007-4136 State: PUBLISHED Published: 2007-11-14T00:00:00 Last Updated: 2024-08-07T14:46:38.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27611 - http://rhn.redhat.com/errata/RHSA-2007-0640.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9871 - http://www.securityfocus.com/bid/26393 - https://bugzilla.redhat.com/show_bug.cgi?id=336101 - http://securityt
%3A9871 - http://www.securityfocus.com/bid/26393 - https://bugzilla.redhat.com/show_bug.cgi?id=336101 - http://securitytracker.com/id?1018921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38358
CVE ID: CVE-2007-4137 State: PUBLISHED Published: 2007-09-18T19:00:00 Last Updated: 2024-08-07T14:46:38.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service (crash) via a crafted Unicode string that triggers a heap-based buffer overflow. NOTE: Qt 4 has the same error in the QUtf8Codec::convertToUnicode function, but it is not exploitable. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=192472 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:183 - http://www.novell.com/linux/se
how_bug.cgi?id=192472 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:183 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://secunia.com/advisories/26868 - http://support.avaya.com/elmodocs2/security/ASA-2007-424.htm - https://issues.rpath.com/browse/RPL-1751 - http://secunia.com/advisories/26811 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11159 - http://secunia.com/advisories/27053 - http://secunia.com/advisories/27996 - http://secunia.com/advisories/27275 - http://secunia.com/advisories/27382 - http://secunia.com/advisories/26857 - http://trolltech.com/company/newsroom/announcements/press.2007-09-03.75640321
82 - http://secunia.com/advisories/26857 - http://trolltech.com/company/newsroom/announcements/press.2007-09-03.7564032119 - http://secunia.com/advisories/26778 - https://bugzilla.redhat.com/show_bug.cgi?id=269001 - http://secunia.com/advisories/26882 - http://secunia.com/advisories/26987 - http://security.gentoo.org/glsa/glsa-200710-28.xml - http://www.vupen.com/english/advisories/2007/3144 - ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc - http://dist.trolltech.com/developer/download/175791_4.diff - http://osvdb.org/39384 - http://secunia.com/advisories/26804 - http://secunia.com/advisories/26782 - http://dist.trolltech.com/developer/download/175791_3.diff - http: