Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://lists.apple.com/archives/Security-announce/2011/Nov/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17136 - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3435 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-17T00:32:16.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3436 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-16T18:13:02.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3437 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-16T19:30:38.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://securitytracker.com/id?1020583 - http://archives.neohapsis.com/archives/bugtraq/
own/isr-evilgrade-1.0.0.tar.gz - http://securitytracker.com/id?1020583 - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3438 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-16T16:22:35.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3439 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-16T20:48:09.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3440 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T09:37:26.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://securitytracker.com/id?1020584 - http://archiv
pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://securitytracker.com/id?1020584 - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3441 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T09:37:26.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15225 - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://securitytracker.com/id?1020582 - http://www.infobyte.
m.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://securitytracker.com/id?1020582 - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3442 State: PUBLISHED Published: 2008-08-01T14:00:00Z Last Updated: 2024-09-16T19:31:43.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020581 - http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf - http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.ht
p://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
CVE ID: CVE-2008-3443 State: PUBLISHED Published: 2008-08-14T23:00:00 Last Updated: 2024-08-07T09:37:26.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31430 - https://usn.ubuntu.com/651-1/ - http://secunia.com/advisories/33185 - http://www.debian.o
secunia.com/advisories/31430 - https://usn.ubuntu.com/651-1/ - http://secunia.com/advisories/33185 - http://www.debian.org/security/2009/dsa-1695 - http://support.apple.com/kb/HT3549 - http://www.securityfocus.com/bid/30682 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44688 - http://securityreason.com/securityalert/4158 - http://secunia.com/advisories/35074 - http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm - http://www.securitytracker.com/id?1021075 - http://lists.apple.com/archives/security-announce/2009/May/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0895.html - ht
le.com/archives/security-announce/2009/May/msg00002.html - http://www.redhat.com/support/errata/RHSA-2008-0895.html - http://www.redhat.com/support/errata/RHSA-2008-0897.html - http://secunia.com/advisories/33398 - http://secunia.com/advisories/32219 - https://www.exploit-db.com/exploits/6239 - http://www.us-cert.gov/cas/techalerts/TA09-133A.html - http://www.vupen.com/english/advisories/2009/1297 - https://usn.ubuntu.com/691-1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9570 - http://secunia.com/advisories/32371 - http://secunia.com/advisories/32165 - http://secunia.com/advisories/32372 - https://www.redhat.com/archives/fedora-package-announce/2
a.com/advisories/32165 - http://secunia.com/advisories/32372 - https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html
CVE ID: CVE-2008-3444 State: PUBLISHED Published: 2008-08-04T10:00:00 Last Updated: 2024-08-07T09:37:27.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted but well-formed web page that contains "a simple set of legitimate HTML tags." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44169 - http://blog.mozilla.com/security/2008/07/30/low-risk-denial-of-service-in-firefox/ - http://www.radware.com/newsevents/pressrelease.aspx?id=6459 - ht
ity/2008/07/30/low-risk-denial-of-service-in-firefox/ - http://www.radware.com/newsevents/pressrelease.aspx?id=6459 - https://bugzilla.mozilla.org/show_bug.cgi?id=448564 - http://www.securityfocus.com/bid/30486
CVE ID: CVE-2008-3445 State: PUBLISHED Published: 2008-08-04T17:00:00 Last Updated: 2024-08-07T09:37:27.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL commands via the location parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44131 - http://www.securityfocus.com/bid/30484 - http://securityreason.com/securityalert/4103 - http://secunia.com/advisories/31302 - https://www.exploit-db.com/exploits/6180
CVE ID: CVE-2008-3446 State: PUBLISHED Published: 2008-08-04T17:00:00 Last Updated: 2024-08-07T09:37:26.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/6179 - http://secunia.com/advisories/31298 - http://www.securityfocus.com/bid/30482 - http://securityreason.com/securityalert/4101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44129
CVE ID: CVE-2008-3447 State: PUBLISHED Published: 2008-08-04T17:00:00 Last Updated: 2024-08-07T09:37:26.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed ZIP archive, probably related to invalid offsets. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2008/Jul/0569.html - http://www.securitytracker.com/id?1020612 - https://www.exploit-db.com/exploits/6174 - http://www.vupen.com/english/advisories/2008/2283 - http://secunia.com/advisories/31313 - https://exchange.xforce.ibmcloud.com/vulnerabili
om/english/advisories/2008/2283 - http://secunia.com/advisories/31313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44134 - http://www.securityfocus.com/bid/30461
CVE ID: CVE-2008-3448 State: PUBLISHED Published: 2008-08-04T17:00:00 Last Updated: 2024-08-07T09:37:27.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30485 - http://www.securityfocus.com/archive/1/494971/100/0/threaded - http://securityreason.com/securityalert/4102 - http://secunia.com/advisories/31359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44180 - http://www.securityfocus.com/archive/
om/advisories/31359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44180 - http://www.securityfocus.com/archive/1/496788/100/0/threaded
CVE ID: CVE-2008-3449 State: PUBLISHED Published: 2008-08-04T17:00:00 Last Updated: 2024-08-07T09:37:27.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multiple IMAP connection requests to the same folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44136 - http://www.securityfocus.com/bid/30498 - http://secunia.com/advisories/31325 - http://www.vupen.com/english/advisories/2008/2287 - http://www.mailenable.com/hotfix/
CVE ID: CVE-2008-3450 State: PUBLISHED Published: 2008-08-04T18:00:00 Last Updated: 2024-08-07T09:37:27.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service (panic) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31356 - http://support.avaya.com/elmodocs2/security/ASA-2008-355.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5609 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237986-1 - http://www.securityfoc
org.mitre.oval%3Adef%3A5609 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-237986-1 - http://www.securityfocus.com/bid/30513 - http://secunia.com/advisories/31536 - http://www.vupen.com/english/advisories/2008/2290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44158 - http://securitytracker.com/id?1020616
CVE ID: CVE-2008-3451 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:27.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44101 - http://www.securityfocus.com/bid/30431 - http://secunia.com/advisories/31232 - http://bugs.phpwebgallery.net/view.php?id=769 - http://forum.phpwebgallery.net/viewtopic.php?id=13545 - http://www.openwall.com/lists/oss-security/2008/08/01
p?id=769 - http://forum.phpwebgallery.net/viewtopic.php?id=13545 - http://www.openwall.com/lists/oss-security/2008/08/01/3
CVE ID: CVE-2008-3452 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:26.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the loc_id parameter in a list_events action to mod.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30457 - https://www.exploit-db.com/exploits/6171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44115 - http://securityreason.com/securityalert/4104
CVE ID: CVE-2008-3453 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:27.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44122 - http://sourceforge.net/project/shownotes.php?release_id=616122 - http://secunia.com/advisories/31259
CVE ID: CVE-2008-3454 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:27.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/4105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44110 - http://secunia.com/advisories/31235 - https://www.exploit-db.com/exploits/6163 - http://www.securityfocus.com/bid/30444
CVE ID: CVE-2008-3455 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:27.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44108 - http://securityreason.com/securityalert/4106 - https://www.exploit-db.com/exploits/6160
CVE ID: CVE-2008-3456 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:27.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:202 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html - http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf
ckage-announce/2008-July/msg01316.html - http://yehg.net/lab/pr0js/advisories/Cross-Site_Framing_inphpMyAdmin2.11.7.pdf - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44050 - http://secunia.com/advisories/32834 - http://www.vupen.com/english/advisories/2008/2226/references - http://www.debian.org/security/2008/dsa-1641 - http://secunia.com/advisories/31312 - http://secunia.com/advisories/31263 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6 - http://www.securityfocus.com/bid/30420 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
CVE ID: CVE-2008-3457 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:27.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:202 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html - htt
y/advisories?name=MDVSA-2008:202 - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01316.html - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01239.html - http://yehg.net/lab/pr0js/advisories/XSS_inPhpMyAdmin2.11.7.pdf - http://secunia.com/advisories/32834 - http://www.vupen.com/english/advisories/2008/2226/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/44052 - http://www.debian.org/security/2008/dsa-1641 - http://secunia.com/advisories/31312 - http://secunia.com/advisories/31263 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-6 - http://www.securityfocus.com/bid/30420 - http://lists.opensuse.org/opensuse-secu
_page/security.php?issue=PMASA-2008-6 - http://www.securityfocus.com/bid/30420 - http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.html
CVE ID: CVE-2008-3458 State: PUBLISHED Published: 2008-08-04T19:00:00Z Last Updated: 2024-09-16T16:18:19.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read mail merge templates via a direct request to the wordtemplatedownload directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27228 - http://sourceforge.net/project/shownotes.php?release_id=567189 - http://www.osvdb.org/40218 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2107 - http://wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_
b.org/40218 - http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2107 - http://wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_Release_Notes - http://secunia.com/advisories/28370 - http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/11811
CVE ID: CVE-2008-3459 State: PUBLISHED Published: 2008-08-04T19:00:00 Last Updated: 2024-08-07T09:37:26.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary commands via crafted (1) lladdr and (2) iproute configuration directives, probably related to shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://openvpn.net/index.php/documentation/change-log/changelog-21.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/44209 - http://www.securityfocus.com/bid/30532 - http://www.securitytracker.com
ange.xforce.ibmcloud.com/vulnerabilities/44209 - http://www.securityfocus.com/bid/30532 - http://www.securitytracker.com/id?1020626 - http://www.vupen.com/english/advisories/2008/2316
CVE ID: CVE-2008-3460 State: PUBLISHED Published: 2008-08-12T23:00:00 Last Updated: 2024-08-07T09:37:26.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l
ity-updates/securitybulletins/2008/ms08-044 - http://www.us-cert.gov/cas/techalerts/TA08-225A.html - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6019 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=737 - http://www.securitytracker.com/id?1020673 - http://marc.info/?l=bugtraq&m=121915960406986&w=2 - http://www.securityfocus.com/bid/30600 - http://www.vupen.com/english/advisories/2008/2348 - http://secunia.com/advisories/31336
CVE ID: CVE-2008-3461 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3462 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2008-3463 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.