Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3459 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:34.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35089 - https://www.exploit-db.com/exploits/4110 - http://www.securityfocus.com/bid/24659 - http://osvdb.org/38037 - http://securityreason.com/securityalert/2844 - http://www.securityfocus.com/archive/1/472296/10
http://osvdb.org/38037 - http://securityreason.com/securityalert/2844 - http://www.securityfocus.com/archive/1/472296/100/0/threaded
CVE ID: CVE-2007-3460 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:35.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) aide or (2) perso parameter. Additional Analyst Notes: - CVE Program Container: References: - http://spip-edu.edres74.net/article.php3?id_article=210 - http://www.securityfocus.com/bid/24664 - http://secunia.com/advisories/25845 - http://osvdb.org/36327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35091 - https://www.exploit-db.com/exploits/4112
CVE ID: CVE-2007-3461 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:35.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24666 - https://www.exploit-db.com/exploits/4114 - http://osvdb.org/36294 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35090 - http://secunia.com/advisories/25844
CVE ID: CVE-2007-3462 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:36.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network. Additional Analyst Notes: - CVE Program Container: References: - http://labs.calyptix.com/CX-2007-04.php - http://osvdb.org/37644 - http://labs.calyptix.com/CX-2007-04.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35093 - http://www.sofaware.com/supportDownloads.aspx?boneId=
txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35093 - http://www.sofaware.com/supportDownloads.aspx?boneId=182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35094 - http://secunia.com/advisories/25822 - http://www.vupen.com/english/advisories/2007/2364 - http://www.securityfocus.com/archive/1/472290/100/0/threaded - http://www.securitytracker.com/id?1018317
CVE ID: CVE-2007-3463 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:34.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 allows local users, who have sessions created by another user's RunAs (run as) command, to kill arbitrary processes of this other user, as demonstrated by the taskkill program. NOTE: the researcher claims a vendor dispute in which the vendor states that "RunAs and UAC are convenience features, not security boundaries. If you need a security guarantee, please log out and log back in with a different account. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39014 - http:/
th a different account. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39014 - http://www.securityfocus.com/archive/1/472282/100/0/threaded - http://www.securityfocus.com/archive/1/472216/100/0/threaded
CVE ID: CVE-2007-3464 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:34.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://labs.calyptix.com/CX-2007-04.php - http://osvdb.org/37644 - http://labs.calyptix.com/CX-2007-04.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/
http://osvdb.org/37644 - http://labs.calyptix.com/CX-2007-04.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/35094 - http://www.securityfocus.com/archive/1/472290/100/0/threaded
CVE ID: CVE-2007-3465 State: PUBLISHED Published: 2007-06-27T18:00:00 Last Updated: 2024-08-07T14:21:34.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password. Additional Analyst Notes: - CVE Program Container: References: - http://labs.calyptix.com/CX-2007-04.php - http://labs.calyptix.com/CX-2007-04.txt - http://osvdb.org/41433 - http://www.securityfocus.com/archive/1/472290/100/0/threaded
CVE ID: CVE-2007-3467 State: PUBLISHED Published: 2007-06-27T22:00:00 Last Updated: 2024-08-07T14:21:36.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the __status_Update function in stats.c VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a WAV file with a large sample rate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471933/100/0/threaded - http://osvdb.org/42189 - http://www.isecpartners.com/advisories/2007-001-vlc.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14863 - http://www.debian.org/se
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14863 - http://www.debian.org/security/2007/dsa-1332 - http://secunia.com/advisories/25980
CVE ID: CVE-2007-3468 State: PUBLISHED Published: 2007-06-27T22:00:00 Last Updated: 2024-08-07T14:21:34.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: input.c in VideoLAN VLC Media Player before 0.8.6c allows remote attackers to cause a denial of service (crash) via a crafted WAV file that causes an uninitialized i_nb_resamplers variable to be used. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/471933/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14744 - http://osvdb.org/38992 - http://www.isecpartners.com/advisories/2007-001-vlc.txt - http://www.debian.org/sec
f%3A14744 - http://osvdb.org/38992 - http://www.isecpartners.com/advisories/2007-001-vlc.txt - http://www.debian.org/security/2007/dsa-1332 - http://secunia.com/advisories/25980
CVE ID: CVE-2007-3469 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:34.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8653 - http://secunia.com/advisories/25847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35128 - http://osvdb.org/36610 - http://sunsolve.sun.com/search/document.do?assetkey
xforce.ibmcloud.com/vulnerabilities/35128 - http://osvdb.org/36610 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102963-1 - http://www.vupen.com/english/advisories/2007/2366 - http://www.securitytracker.com/id?1018326 - http://www.securityfocus.com/bid/24685
CVE ID: CVE-2007-3470 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:36.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service (kernel panic) via unspecified vectors related to "memory buffers" of Secure Socket Layer (SSL) records. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35126 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9165 - http://sunsolve.sun.com/search/docum
al.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9165 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102918-1 - http://www.vupen.com/english/advisories/2007/2365 - http://secunia.com/advisories/25863 - http://support.avaya.com/elmodocs2/security/ASA-2007-312.htm - http://osvdb.org/36609 - http://www.securityfocus.com/bid/24686 - http://www.securitytracker.com/id?1018322
CVE ID: CVE-2007-3471 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:36.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35127 - http://www.vupen.com/english/advisories/2007/2369 - http://secunia.com/advisories/25876 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2015 - http://secunia.com/advisories/26136 - http
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2015 - http://secunia.com/advisories/26136 - http://support.avaya.com/elmodocs2/security/ASA-2007-310.htm - http://www.securityfocus.com/bid/24687 - http://osvdb.org/36608 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102954-1
CVE ID: CVE-2007-3472 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:35.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://secunia.com/advisories/29157 - http://www.secweb.se/en/advisories/gd-gdimagecreatetruecolor-integer-overflow/ - https://oval.cisecurity.org/repository/search/definit
web.se/en/advisories/gd-gdimagecreatetruecolor-integer-overflow/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11067 - http://secunia.com/advisories/26415 - https://issues.rpath.com/browse/RPL-1643 - https://bugzilla.redhat.com/show_bug.cgi?id=277421 - http://osvdb.org/37745 - http://secunia.com/advisories/25855 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://www.securityfocus.com/archive/1/478796/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35108 - http://secunia.com/advisories/26467 - http://secunia.com/advisories/42813 - http://www.libgd.org/ReleaseNote020035 - http://security.gentoo.org/glsa/glsa-200708-05.
/secunia.com/advisories/42813 - http://www.libgd.org/ReleaseNote020035 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html - http://www.vupen.com/english/advisories/2011/0022 - http://secunia.com/advisories/25860 - http://www.vupen.com/english/advisories/2007/2336 - http://secunia.com/advisories/26663 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html - http://secunia.com/advisories/26856 - http://secunia.com/advisories/26272 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html
es/26272 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html - http://www.securityfocus.com/bid/24651 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 - http://bugs.libgd.org/?do=details&task_id=89 - http://secunia.com/advisories/26766 - http://secunia.com/advisories/26390 - ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://fedoranews.org/updates/FEDORA-2007-205.shtml
CVE ID: CVE-2007-3473 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:35.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via unspecified vectors involving a gdImageCreate failure. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35109 - http://www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://secunia.com/advisories/29157 - http://osvdb.org/37744 - https://oval.cisecuri
ty/advisories?name=MDKSA-2007:164 - http://secunia.com/advisories/29157 - http://osvdb.org/37744 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11806 - http://secunia.com/advisories/26415 - https://issues.rpath.com/browse/RPL-1643 - https://bugzilla.redhat.com/show_bug.cgi?id=277421 - http://secunia.com/advisories/25855 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://www.securityfocus.com/archive/1/478796/100/0/threaded - http://secunia.com/advisories/26467 - http://secunia.com/advisories/42813 - http://www.libgd.org/ReleaseNote020035 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www
eleaseNote020035 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html - http://www.vupen.com/english/advisories/2011/0022 - http://secunia.com/advisories/25860 - http://www.vupen.com/english/advisories/2007/2336 - http://secunia.com/advisories/26663 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html - http://secunia.com/advisories/26856 - http://secunia.com/advisories/26272 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://lists.fedoraproject.org/pipermail/package-an
-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html - http://bugs.libgd.org/?do=details&task_id=94 - http://www.securityfocus.com/bid/24651 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 - http://secunia.com/advisories/26766 - http://secunia.com/advisories/26390 - ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz - http://fedoranews.org/updates/FEDORA-2007-205.shtml
CVE ID: CVE-2007-3474 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:35.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-assisted remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://secunia.com/advisories/26415 - https://issues.rpath.com/browse/RPL-1643 - https://bugzilla.redhat.com/show_bug.cgi?id=277421 - http://secunia.com/advisories/25855 - https://exchange.
/RPL-1643 - https://bugzilla.redhat.com/show_bug.cgi?id=277421 - http://secunia.com/advisories/25855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35110 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://www.securityfocus.com/archive/1/478796/100/0/threaded - http://secunia.com/advisories/26467 - http://secunia.com/advisories/42813 - http://www.libgd.org/ReleaseNote020035 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html - http://www.vupen.com/english/advisories/2011/0022 - http://secunia.com/advisories/25860 - http://www.vupen.com/english/advisor
/www.vupen.com/english/advisories/2011/0022 - http://secunia.com/advisories/25860 - http://www.vupen.com/english/advisories/2007/2336 - http://secunia.com/advisories/26663 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html - http://osvdb.org/37743 - http://secunia.com/advisories/26856 - http://secunia.com/advisories/26272 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html - http://www.securityfocus.com/bid/24651 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 - http://secunia.com/advisories/26766 - http://secunia.com/advisories/26390 - ftp://ftp.slackware
es?name=MDKSA-2007:153 - http://secunia.com/advisories/26766 - http://secunia.com/advisories/26390 - ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz - http://fedoranews.org/updates/FEDORA-2007-205.shtml
CVE ID: CVE-2007-3475 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:35.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image that has no global color map. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://secunia.com/advisories/29157 - http://www.libgd.org/ReleaseNote020035 - http://secunia.com/advisories/26415 - https://issues.rpath.com/browse/RPL-1643 - https://bugzilla.redhat.com/sho
20035 - http://secunia.com/advisories/26415 - https://issues.rpath.com/browse/RPL-1643 - https://bugzilla.redhat.com/show_bug.cgi?id=277421 - http://security.gentoo.org/glsa/glsa-200805-13.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9728 - http://bugs.libgd.org/?do=details&task_id=70 - http://www.securityfocus.com/archive/1/478796/100/0/threaded - http://secunia.com/advisories/26467 - http://secunia.com/advisories/42813 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html - http://www.vupen.com/english/advisories/2011/002
hat.com/archives/fedora-package-announce/2007-September/msg00311.html - http://www.vupen.com/english/advisories/2011/0022 - http://secunia.com/advisories/25860 - http://secunia.com/advisories/26663 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html - http://secunia.com/advisories/26856 - http://secunia.com/advisories/26272 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html - http://www.securityfocus.com/bid/24651 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 - http://secunia.com/advisories/26766
us.com/bid/24651 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 - http://secunia.com/advisories/26766 - http://secunia.com/advisories/26390 - ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://fedoranews.org/updates/FEDORA-2007-205.shtml
CVE ID: CVE-2007-3476 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:35.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37741 - http://bugs.libgd.org/?do=details&task_id=87 - http://www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://secunia.com
www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://secunia.com/advisories/29157 - http://www.debian.org/security/2008/dsa-1613 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10348 - http://www.libgd.org/ReleaseNote020035 - http://secunia.com/advisories/26415 - https://issues.rpath.com/browse/RPL-1643 - https://bugzilla.redhat.com/show_bug.cgi?id=277421 - http://security.gentoo.org/glsa/glsa-200805-13.xml - http://www.securityfocus.com/archive/1/478796/100/0/threaded - http://secunia.com/advisories/26467 - http://secunia.com/advisories/31168 - http://secunia.com/advisories/42813 - http://securi
secunia.com/advisories/26467 - http://secunia.com/advisories/31168 - http://secunia.com/advisories/42813 - http://security.gentoo.org/glsa/glsa-200708-05.xml - http://secunia.com/advisories/30168 - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html - http://www.vupen.com/english/advisories/2011/0022 - http://secunia.com/advisories/25860 - http://secunia.com/advisories/26663 - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html - http://secunia.com/advisories/26856 - http://secunia.com/advisories/26272 - http://security.gentoo.org/glsa/glsa-200711-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://lists.fe
security.gentoo.org/glsa/glsa-200711-34.xml - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html - http://www.securityfocus.com/bid/24651 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 - http://secunia.com/advisories/26766 - http://secunia.com/advisories/26390 - ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz - http://www.novell.com/linux/security/advisories/2007_15_sr.html - http://fedoranews.org/updates/FEDORA-2007-205.shtml
CVE ID: CVE-2007-3477 State: PUBLISHED Published: 2007-06-28T18:00:00 Last Updated: 2024-08-07T14:21:34.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2007/0024/ - http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 - http://www.debian.org/security/2008/dsa-1613 - http://www.libgd.org/ReleaseNote020035 - http://secunia.com/advisories/26415 - https://issues.rpath.