Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttp://secunia.com/advisories/20163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11195 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://www.redhat.com/support/errata/RHSA-2005-275.html - http://secunia.com/advisories/19607 - http://www.debian.org/security/2006/dsa-1070 - http://www.redhat.com/support/errata/RHSA-2004-537.html - http://secunia.com/advisories/20162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18025 - http://www.debian.org/security/2006/dsa-106
isories/20162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18025 - http://www.debian.org/security/2006/dsa-1067 - http://www.securityfocus.com/bid/11646 - http://www.debian.org/security/2006/dsa-1069 - ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1073 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20163 - http://secunia.com/advisories/18684 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_el
http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18025 - http://www.redhat.com/support/errata/RHSA-2006-0190.html - http://www.redhat.com/support/errata/RHSA-2004-549.html - http://www.debian.org/security/2006/dsa-1067 - http://www.securityfocus.com/bid/11646 - http://www.debian.org/security/2006/dsa-1069 - http://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://s
://www.redhat.com/support/errata/RHSA-2005-293.html - http://www.redhat.com/support/errata/RHSA-2004-505.html - http://secunia.com/advisories/20202 - http://www.redhat.com/support/errata/RHSA-2004-504.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11503 - http://www.redhat.com/support/errata/RHSA-2006-0191.html - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1074 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110322596918807&w=2 - http://secunia.com/advisories/20163 - http://www.debian.org/security/2006/dsa-1082 - http://www.mandriva.com/security/advisories?name=MDKSA-2005:022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18290 - http://marc.info/?l=linux-ke
visories?name=MDKSA-2005:022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18290 - http://marc.info/?l=linux-kernel&m=110021173607372&w=2 - https://bugzilla.fedora.us/show_bug.cgi?id=2336 - http://www.debian.org/security/2006/dsa-1070 - http://secunia.com/advisories/20162 - http://www.trustix.org/errata/2005/0001/ - http://www.securityfocus.com/bid/11754 - http://www.debian.org/security/2006/dsa-1067 - http://www.debian.org/security/2006/dsa-1069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9751 - http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930 - http://secunia.com/advisories/20202 - http://secunia.com/advisories/
com.br/atualizacoes/index.php?id=a&anuncio=000930 - http://secunia.com/advisories/20202 - http://secunia.com/advisories/20338
CVE ID: CVE-2004-1075 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:38:59.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11745 - http://marc.info/?l=bugtraq&m=110138568212036&w=2 - http://marc.info/?l=bugtraq&m=110149122529761&w=2 - http://zwiki.org/925ZwikiXSSVulnerability - https://exchange.xfo
2 - http://marc.info/?l=bugtraq&m=110149122529761&w=2 - http://zwiki.org/925ZwikiXSSVulnerability - https://exchange.xforce.ibmcloud.com/vulnerabilities/18237 - http://www.gentoo.org/security/en/glsa/glsa-200412-23.xml
CVE ID: CVE-2004-1076 State: PUBLISHED Published: 2004-12-08T05:00:00 Last Updated: 2024-08-08T00:39:00.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13670/ - http://marc.info/?l=bugtraq&m=110149441815270&w=2 - http://www.debian.org/security/2004/dsa-609 - http://www.osvdb.org/12610 - http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup - http://www.securityfocus.com/bid/
- http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup - http://www.securityfocus.com/bid/11756 - http://marc.info/?l=bugtraq&m=110142899319841&w=2
CVE ID: CVE-2004-1077 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-08T00:39:00.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15108 - http://www.idefense.com/application/poi/display?id=237&type=vulnerabilities - http://support.citrix.com/kb/entry.jspa?externalID=CTX105650
CVE ID: CVE-2004-1078 State: PUBLISHED Published: 2005-04-26T04:00:00 Last Updated: 2024-08-08T00:39:00.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15108 - http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities - http://support.citrix.com/kb/entry.jspa?externalID=CTX10565
se.com/application/poi/display?id=238&type=vulnerabilities - http://support.citrix.com/kb/entry.jspa?externalID=CTX105650
CVE ID: CVE-2004-1079 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433927/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2005:028 - http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029563.html - http://www.securityfocus.com/bid/11945 - http://www.gentoo.org/security/en/glsa/glsa-2004
re/2004-November/029563.html - http://www.securityfocus.com/bid/11945 - http://www.gentoo.org/security/en/glsa/glsa-200412-09.xml - http://marc.info/?l=bugtraq&m=110175523207437&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18283
CVE ID: CVE-2004-1080 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012516 - http://support.microsoft.com/kb/890710 - http://www.kb.cert.org/vuls/id/145134 - https://oval.cisec
ker.com/id?1012516 - http://support.microsoft.com/kb/890710 - http://www.kb.cert.org/vuls/id/145134 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2541 - http://www.osvdb.org/12378 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1549 - http://www.immunitysec.com/downloads/instantanea.pdf - http://secunia.com/advisories/13328/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18259 - http://www.ciac.org/ciac/bulletins/p-054.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3677 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
oval%3Aorg.mitre.oval%3Adef%3A3677 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4831 - http://marc.info/?l=bugtraq&m=110150370506704&w=2 - http://www.securityfocus.com/bid/11763 - http://xforce.iss.net/xforce/alerts/id/184 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4372 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2734
CVE ID: CVE-2004-1081 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18350 - http://www.
ives/security-announce/2004/Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18350 - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1082 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T00:39:00.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18347 - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - http://www.securitytracker.com/alerts/2004/Dec/1012414.html - http://www.securityfocus.com/bid/9571 - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1083 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com
om/advisories/13362/ - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18348 - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1084 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18349 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.
m/vulnerabilities/18349 - http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1085 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18352 - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1086 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18354 - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1087 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18355 - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1088 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18353 - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1089 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T00:39:00.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/11802 - http://secunia.com/advisories/13362/ - http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/18351 - http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE ID: CVE-2004-1090 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18907 - http://secunia.com/advisories/13863/ - http://www.debian.org/security/2005/dsa-639 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2004-1091 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/18908 - http://secunia.com/advisories/13863 - http://www.debian.org/security/2005/dsa-639 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2004-1092 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13863/ - http://www.debian.org/security/2005/dsa-639 - http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/18904
CVE ID: CVE-2004-1093 State: PUBLISHED Published: 2005-01-22T05:00:00 Last Updated: 2024-08-08T00:39:00.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/13863/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/18905 - http://www.debian.org/security/2005/dsa-639 - http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE ID: CVE-2004-1094 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build
ckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products. NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420274/100/0/threaded - http://securitytracker.com/id?1011944 - http://archives.neohapsis.com/archives/fulldisclosure/2004-10/1044.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/22737 - http://www.osvdb.org/19906 - http://www.vupen.com/english/advisories/2005/2057
rce.ibmcloud.com/vulnerabilities/22737 - http://www.osvdb.org/19906 - http://www.vupen.com/english/advisories/2005/2057 - http://www.networksecurity.fi/advisories/lotus-notes.html - http://marc.info/?l=bugtraq&m=109894226007607&w=2 - http://www.networksecurity.fi/advisories/payroll.html - http://secunia.com/advisories/19451 - http://www.networksecurity.fi/advisories/dtsearch.html - http://www.networksecurity.fi/advisories/mcafee-virusscan.html - http://www.securityfocus.com/bid/11555 - http://secunia.com/advisories/17394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17879 - http://www.securityfocus.com/archive/1/429361/100/0/threaded - http://www.networksecurity.fi/advisories/multil
s/17879 - http://www.securityfocus.com/archive/1/429361/100/0/threaded - http://www.networksecurity.fi/advisories/multiledger.html - http://www.securityfocus.com/archive/1/445369/100/0/threaded - http://www.kb.cert.org/vuls/id/582498 - http://securitytracker.com/id?1012297 - http://www.vupen.com/english/advisories/2006/1176 - http://securitytracker.com/id?1016817 - http://secunia.com/advisories/18194 - http://securityreason.com/securityalert/653 - http://securityreason.com/securityalert/296 - http://secunia.com/advisories/17096 - http://service.real.com/help/faq/security/041026_player/EN/ - http://www.securiteam.com/windowsntfocus/6Z00W00EAM.html
CVE ID: CVE-2004-1095 State: PUBLISHED Published: 2004-12-01T05:00:00 Last Updated: 2024-08-08T00:39:00.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they shoul
VE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17871 - http://www.svgalib.org/rus/zgv/ - http://www.svgalib.org/rus/zgv/zgv-5.8-integer-overflow-fix.diff - http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml - http://marc.info/?l=bugtraq&m=109898111915661&w=2 - http://www.securityfocus.com/bid/11556 - http://marc.info/?l=bugtraq&m=109886210702781&w=2