Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
viewnews&id=250 - http://osvdb.org/33277 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://osvdb.org/33283 - http://osvdb.org/33287 - http://www.securityfocus.com/bid/22563 - http://osvdb.org/33286
CVE ID: CVE-2007-1178 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:43:22.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://osvdb.org/33282 - http://osvdb.org/33279 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1179 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:43:22.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recommend feature, Email Article (2) senders and (3) recipients, (4) New User Approval, (5) Edit Profiles, (6) the Newsletter Subscription form, (7) the Recommend form, and (8) sending of articles, which has unknown impact, and remote attack vectors related to spam attacks and possibly other attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33284 - http://www.web-app.org/cgi-bin/index.
nal Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33284 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1180 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:33.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 does not check referrers in certain forms, which might facilitate remote cross-site request forgery (CSRF) attacks or have other unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://osvdb.org/33285 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1181 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:34.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 passes (1) Unused Informations and (2) the username through Edit Profile forms, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33291 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1182 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:33.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 allows remote Guest users to edit a Guest profile, which has unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://osvdb.org/33292 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1183 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:33.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 allows remote authenticated users to spoof another user's Real Name via whitespace, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://osvdb.org/33293 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1184 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:35.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of WebAPP before 0.9.9.5 has a CAPTCHA setting of "no," which makes it easier for automated programs to submit false data. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33294 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1185 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:34.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Search, (2) Edit Profile, (3) Recommend, and (4) User Approval forms in WebAPP before 0.9.9.5 use hidden inputs, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://osvdb.org/33295 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1186 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:34.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 does not "censor" the Latest Member real name, which has unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://osvdb.org/33296 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1187 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:34.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33281 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://osvdb.org/33298 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1188 State: PUBLISHED Published: 2007-02-28T16:00:00 Last Updated: 2024-08-07T12:50:33.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebAPP before 0.9.9.5 allows remote attackers to submit Search form input that is not checked for (1) composition or (2) length, which has unknown impact, possibly related to "search form hijacking". Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33299 - http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=250 - http://www.vupen.com/english/advisories/2007/0604 - http://secunia.com/advisories/24080 - http://www.securityfocus.com/bid/22563
CVE ID: CVE-2007-1189 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by (1) modifying the iseve function to gain privileges and (2) making the devpermcheck function grant unrestricted device permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22749 - https://www.exploit-db.com/exploits/3383 - http://kernelspace.us/itheft.c - http://osvd
ww.securityfocus.com/bid/22749 - https://www.exploit-db.com/exploits/3383 - http://kernelspace.us/itheft.c - http://osvdb.org/34956 - http://lists.immunitysec.com/pipermail/dailydave/2007-February/004118.html
CVE ID: CVE-2007-1190 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36205 - http://www.securityfocus.com/bid/22755
CVE ID: CVE-2007-1191 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Console.log file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32721 - http://securityreason.com/securityalert/2368 - http://osvdb.org/34486 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-Fe
urityreason.com/securityalert/2368 - http://osvdb.org/34486 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052722.html
CVE ID: CVE-2007-1192 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24392 - http://downloads.securityfocus.com/vulnerabilities/exploits/22754.py - http://www.securityfocus.com/bid/22754 - http://osvdb.org/33868
CVE ID: CVE-2007-1193 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/35993 - http://www.vupen.com/english/advisories/2007/0781 - http://sourceforge.net/tracker/index.php?func=detail&aid=1656000&group_id=156477&atid=799942 - http://www.securityfocus.com/bid/22756
CVE ID: CVE-2007-1194 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:35.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine that the local machine is an emulator, or a similar environment not based on a physical Intel processor, which allows attackers to produce malware that is more difficult to analyze. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/461804/100/100/threaded - http://www.securityfocus.com/archive/1/461555/100/0/threaded - http://www.ntsecuri
m/archive/1/461804/100/100/threaded - http://www.securityfocus.com/archive/1/461555/100/0/threaded - http://www.ntsecurity.nu/onmymind/2007/2007-02-27.html - http://www.securityfocus.com/archive/1/461805/100/100/threaded - http://osvdb.org/34955
CVE ID: CVE-2007-1195 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:33.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0786 - http://downloads.securityfocus.com/vulnerabilities/exploits/22747.pl - http://www.securityfocus.com/bid/22747 - http://osvdb.org/33813 - https://www.exploit-db.com/exploits/3385
CVE ID: CVE-2007-1196 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:35.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via unspecified vectors, related to the implementation of ICA connectivity through proxy servers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/32754 - http://secunia.com/advisories/24350 - http://www.kb.cert.org/vuls/id/798364 - http://support.citrix.com/article/CTX112589 - http://www.securitytracker.com/id?1017712 - htt
.cert.org/vuls/id/798364 - http://support.citrix.com/article/CTX112589 - http://www.securitytracker.com/id?1017712 - http://www.vupen.com/english/advisories/2007/0784 - http://osvdb.org/33833 - http://www.securityfocus.com/bid/22762
CVE ID: CVE-2007-1197 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Epiware before 4.7.5 have unknown impact and attack vectors, possibly related to cross-site scripting (XSS) and other unspecified issues. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=669653 - http://osvdb.org/33817
CVE ID: CVE-2007-1198 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a variant of CVE-2007-0982. Additional Analyst Notes: - CVE Program Container: References: - http://www.taskfreak.com/versions.html - http://osvdb.org/32089
CVE ID: CVE-2007-1199 State: PUBLISHED Published: 2007-03-02T19:00:00 Last Updated: 2024-08-07T12:50:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with <</URI(file:///C:/)/S/URI>>, a different issue than CVE-2007-0045. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22753 - http://security.gentoo.org/glsa/glsa-200803-01.xml - http://www.gnucitizen.org/projects/pdf-strikes-back/ - http://secunia.com/advisories/29205 - http://secunia.com/advisories/24408 - https://exchange.xforce.ibmcloud.com/vu
k/ - http://secunia.com/advisories/29205 - http://secunia.com/advisories/24408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32815 - http://osvdb.org/33897
CVE ID: CVE-2007-1201 State: PUBLISHED Published: 2008-03-11T23:00:00 Last Updated: 2024-08-07T12:50:34.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1019581 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-017 - http://www.vupen.com/english/advisories/2008/0849/references - htt
us/security-updates/securitybulletins/2008/ms08-017 - http://www.vupen.com/english/advisories/2008/0849/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5327 - http://www.us-cert.gov/cas/techalerts/TA08-071A.html - http://marc.info/?l=bugtraq&m=120585858807305&w=2 - http://marc.info/?l=bugtraq&m=120585858807305&w=2 - http://www.securityfocus.com/bid/28136 - http://secunia.com/advisories/29328
CVE ID: CVE-2007-1202 State: PUBLISHED Published: 2007-05-08T23:00:00 Last Updated: 2024-08-07T12:50:34.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property strings of certain control words," which allows user-assisted remote attackers to trigger heap corruption and execute arbitrary code, aka the "Word RTF Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securitytracker.com/id?1018013 - http://la
- http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securitytracker.com/id?1018013 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=525 - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.vupen.com/english/advisories/2007/1709 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-024 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - http://www.osvdb.org/34388 - http://www.kb.cert.org/vuls/id/555489 - http://www.securityfocus.com/bid/23836 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1900
CVE ID: CVE-2007-1203 State: PUBLISHED Published: 2007-05-08T22:00:00 Last Updated: 2024-08-07T12:50:33.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/468871/100/200/threaded - http://www.securityfocus.com/archive/1/468871/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33914 - http://www.us-cert
.com/archive/1/468871/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33914 - http://www.us-cert.gov/cas/techalerts/TA07-128A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-023 - http://www.securityfocus.com/bid/23779 - http://www.osvdb.org/34394 - http://www.vupen.com/english/advisories/2007/1708 - http://www.securitytracker.com/id?1018012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2014 - http://secunia.com/advisories/25150
CVE ID: CVE-2007-1204 State: PUBLISHED Published: 2007-04-10T21:00:00 Last Updated: 2024-08-07T12:50:34.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1017895 - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.vupen.com/english/advisories/2007/1323 - http://secunia.com/advisories/24822 - ht
1/466331/100/200/threaded - http://www.vupen.com/english/advisories/2007/1323 - http://secunia.com/advisories/24822 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2049 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=509 - http://www.osvdb.org/34010 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-019 - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.securityfocus.com/bid/23371
CVE ID: CVE-2007-1205 State: PUBLISHED Published: 2007-04-10T21:00:00 Last Updated: 2024-08-07T12:50:34.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22896 - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.kb.cert.org/vuls/id/728057 - http://www.vupen.com/english/advisories/2007/1324 - http://www.securitytracker.com/i
://www.kb.cert.org/vuls/id/728057 - http://www.vupen.com/english/advisories/2007/1324 - http://www.securitytracker.com/id?1017896 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-020 - http://www.securityfocus.com/archive/1/465235/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-100A.html - http://www.securityfocus.com/bid/23337 - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://secunia.com/secunia_research/2006-74/advisory/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2034
CVE ID: CVE-2007-1206 State: PUBLISHED Published: 2007-04-10T21:00:00 Last Updated: 2024-08-07T12:50:34.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain privileges by modifying the "zero page" during a race condition before the view is unmapped. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.securityfocus.com/bid/
tainer: References: - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.securityfocus.com/bid/23367 - http://www.osvdb.org/34011 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1639 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-022 - http://www.kb.cert.org/vuls/id/337953 - http://www.vupen.com/english/advisories/2007/1326 - http://www.securityfocus.com/archive/1/465232/100/0/threaded - http://secunia.com/advisories/24834 - http://securitytracker.com/id?1017898 - http://www.us-cert.gov/cas/techalerts/TA07-100A.html - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://resea
s-cert.gov/cas/techalerts/TA07-100A.html - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://research.eeye.com/html/advisories/published/AD20070410a.html
CVE ID: CVE-2007-1207 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1208 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-1209 State: PUBLISHED Published: 2007-04-10T21:00:00 Last Updated: 2024-08-07T12:50:34.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://www.securitytracker.com/id?1017897 - http://www