Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-3883 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:04.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in (1) the second argument to the Save method, or the first argument to the (2) SaveLayoutChanges or (3) SaveMenuUsageData method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/24959 - https://www.exploit-db.com/exploits/5395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35471 - http://osvdb.org/37692 - https://www.exploit
xploits/5395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35471 - http://osvdb.org/37692 - https://www.exploit-db.com/exploits/4190 - http://secunia.com/advisories/26098
CVE ID: CVE-2007-3884 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:05.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2557 - http://secunia.com/advisories/26089 - http://www.securityfocus.com/bid/24928 - http://secunia.com/advisories/26736 - http://yollubunlar.org/husrev-forums-v201powerboard-sql-injection-exploit-3503.html
tp://secunia.com/advisories/26736 - http://yollubunlar.org/husrev-forums-v201powerboard-sql-injection-exploit-3503.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35443 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36530 - http://www.osvdb.org/38185 - http://www.securityfocus.com/archive/1/478974/100/0/threaded
CVE ID: CVE-2007-3885 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:04.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in philboard_search.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2557 - http://www.osvdb.org/38186 - http://secunia.com/advisories/26089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
http://www.osvdb.org/38186 - http://secunia.com/advisories/26089 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35444 - http://secunia.com/advisories/26736
CVE ID: CVE-2007-3886 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:06.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0286.html - http://www.securityfocus.com/bid/24960 - http://osvdb.org/36356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35475 - http://secunia.com/advisories/26080
CVE ID: CVE-2007-3887 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:04.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Isim, (2) Mesajiniz, and (3) E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35445 - http://secunia.com/advisories/26375 - http://www.vupen.com/engl
s://exchange.xforce.ibmcloud.com/vulnerabilities/35445 - http://secunia.com/advisories/26375 - http://www.vupen.com/english/advisories/2007/2558 - http://www.packetstormsecurity.org/0707-exploits/aspziy-xss.txt - http://www.securityfocus.com/bid/24937
CVE ID: CVE-2007-3888 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:05.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action, possibly related to the term parameter to index.php; or (2) an anonymous blog entry, possibly involving the (a) posted_by, (b) subject, and (c) content parameters to index.php; as demonstrated by the onmouseover attribute of certain elements. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Progr
n elements. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35448 - http://secunia.com/advisories/26105 - http://www.securityfocus.com/bid/24934 - http://securityreason.com/securityalert/2904 - http://www.securityfocus.com/archive/1/473868/100/0/threaded
CVE ID: CVE-2007-3889 State: PUBLISHED Published: 2007-07-18T23:00:00 Last Updated: 2024-08-07T14:37:04.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the current_subsection parameter to index.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/493224/100/0/threaded - https://www.exploit-db.com/exploits/5774 - http://chroot.org/exploits/chroot_uu_010 - http://secunia.com/advisories/26105 - http://www.securityfocus.com/bid/24934 - https://exchange.xforc
ts/chroot_uu_010 - http://secunia.com/advisories/26105 - http://www.securityfocus.com/bid/24934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35450 - http://securityreason.com/securityalert/2904 - http://www.securityfocus.com/archive/1/473868/100/0/threaded
CVE ID: CVE-2007-3890 State: PUBLISHED Published: 2007-08-14T21:00:00 Last Updated: 2024-08-07T14:37:04.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2149 - http://www.securityfocus.com/bid/25280 - http://www.vupen.com/english/advisories/2007/2868 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://
280 - http://www.vupen.com/english/advisories/2007/2868 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://secunia.com/advisories/26145 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-044 - http://www.securitytracker.com/id?1018561
CVE ID: CVE-2007-3891 State: PUBLISHED Published: 2007-08-14T22:00:00 Last Updated: 2024-08-07T14:37:04.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HTML attributes. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2071 - http://secunia.com/advisories/26439 - http://www.us-cert.gov/cas/techalerts/TA07-226A.html - http://www.vupen.com/english/advisories/2007/2872 - http://www.securitytracker.com/id?1018566 - http://www.kb.cert.org/vuls/i
//www.vupen.com/english/advisories/2007/2872 - http://www.securitytracker.com/id?1018566 - http://www.kb.cert.org/vuls/id/542808 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-048 - http://www.securityfocus.com/bid/25306
CVE ID: CVE-2007-3892 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T14:37:04.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.vupen.com/english/advisories/2007/3437 - http://securitytracker.com/id?1018788 - http://www.securityfocus.com/bid/25915 -
upen.com/english/advisories/2007/3437 - http://securitytracker.com/id?1018788 - http://www.securityfocus.com/bid/25915 - http://secunia.com/advisories/27133 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2244 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html
CVE ID: CVE-2007-3893 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T14:37:04.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2284 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.vupen.com/english/advisories/2007/343
readed - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.vupen.com/english/advisories/2007/3437 - http://securitytracker.com/id?1018788 - http://secunia.com/advisories/23469 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html - http://www.securityfocus.com/bid/25916
CVE ID: CVE-2007-3894 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-3895 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T14:37:04.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/threats/280.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38722 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.securitytracker.com/id?1019073 - http://www
- http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.securitytracker.com/id?1019073 - http://www.securityfocus.com/bid/26804 - http://secunia.com/advisories/28010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4287 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://www.kb.cert.org/vuls/id/321233 - http://www.vupen.com/english/advisories/2007/4180
CVE ID: CVE-2007-3896 State: PUBLISHED Published: 2007-10-11T00:00:00 Last Updated: 2024-08-07T14:37:04.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that
Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482437/100/0/threaded - http://marc.info/?l=full-disclosure&m=119159477404263&w=2 - http://www.securityfocus.com/archive/1/481871/100/0/threaded - http://www.heise-security.co.uk/news/96982 - http://www.securityfocus.com/archive/1/481680/100/0/threaded - http://www.securityfocus.com/archive/1/481664/100/0/threaded - http://marc.info/?l=bugtraq&m=119159924712561&w=2 - http://blogs.zdnet.com/security/?p=577 - http://www.securityfocus.com/archiv
arc.info/?l=bugtraq&m=119159924712561&w=2 - http://blogs.zdnet.com/security/?p=577 - http://www.securityfocus.com/archive/1/481867/100/0/threaded - http://www.securityfocus.com/archive/1/484186/100/0/threaded - http://secunia.com/advisories/26201 - http://marc.info/?l=bugtraq&m=119168062128026&w=2 - http://marc.info/?l=full-disclosure&m=119171444628628&w=2 - http://www.securityfocus.com/archive/1/484186/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4581 - http://xs-sniper.com/blog/remote-command-exec-firefox-2005/ - http://marc.info/?l=full-disclosure&m=119175323322021&w=2 - http://www.securityfocus.com/archive/1/481846/100/0/threaded
http://marc.info/?l=full-disclosure&m=119175323322021&w=2 - http://www.securityfocus.com/archive/1/481846/100/0/threaded - http://securitytracker.com/id?1018831 - http://marc.info/?l=bugtraq&m=119194714125580&w=2 - http://marc.info/?l=full-disclosure&m=119168727402084&w=2 - http://www.securityfocus.com/archive/1/481881/100/0/threaded - http://www.securityfocus.com/archive/1/481671/100/0/threaded - http://www.securityfocus.com/archive/1/481839/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-317A.html - http://marc.info/?l=full-disclosure&m=119180333805950&w=2 - http://www.microsoft.com/technet/security/advisory/943521.mspx - http://www.securityfocus.com/archive/1/481493/100/100/th
ttp://www.microsoft.com/technet/security/advisory/943521.mspx - http://www.securityfocus.com/archive/1/481493/100/100/threaded - http://www.securityfocus.com/archive/1/481624/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-061 - http://www.securityfocus.com/bid/25945 - http://www.securityfocus.com/archive/1/481887/100/0/threaded - http://www.securityfocus.com/archive/1/482292/100/0/threaded - http://www.kb.cert.org/vuls/id/403150 - http://www.securityfocus.com/archive/1/482090/100/0/threaded - http://marc.info/?l=bugtraq&m=119143780202107&w=2 - http://www.securityfocus.com/archive/1/481505/100/0/threaded - http://marc.info/?l=bugtraq&m=119195904
43780202107&w=2 - http://www.securityfocus.com/archive/1/481505/100/0/threaded - http://marc.info/?l=bugtraq&m=119195904813505&w=2 - http://marc.info/?l=full-disclosure&m=119170531020020&w=2 - http://marc.info/?l=bugtraq&m=119144449915918&w=2 - http://www.securitytracker.com/id?1018822
CVE ID: CVE-2007-3897 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T14:37:05.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1018785 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/ova
p://www.securityfocus.com/archive/1/482366/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1706 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-056 - http://www.securityfocus.com/archive/1/481983/100/100/threaded - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=607 - http://www.vupen.com/english/advisories/2007/3436 - http://securitytracker.com/id?1018786 - http://www.securityfocus.com/bid/25908 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html - http://secunia.com/advisories/27112
CVE ID: CVE-2007-3898 State: PUBLISHED Published: 2007-11-14T01:00:00 Last Updated: 2024-08-07T14:37:05.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.trusteer.com/docs/windowsdns.html - http://www.vupen.com/english/advisories/2007/3848 - http://securityreason.com/securityalert/3373 - https://docs.microsoft.com/en-us/security-updates/securitybu
/2007/3848 - http://securityreason.com/securityalert/3373 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-062 - http://secunia.com/advisories/27584 - http://www.securityfocus.com/archive/1/484186/100/0/threaded - http://www.securityfocus.com/archive/1/484186/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-317A.html - http://www.scanit.be/advisory-2007-11-14.html - http://www.securityfocus.com/archive/1/483698/100/0/threaded - http://www.kb.cert.org/vuls/id/484649 - http://www.securityfocus.com/bid/25919 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4395 - http://www.securityfocus.com/archive/1/483635/100/0
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4395 - http://www.securityfocus.com/archive/1/483635/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36805 - http://www.securitytracker.com/id?1018942
CVE ID: CVE-2007-3899 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T14:37:04.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27151 - http://www.securityfocus.com/bid/25906 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1879 - http://www.securityfocus.com/archive/1/482366/100/0/th
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1879 - http://www.securityfocus.com/archive/1/482366/100/0/threaded - http://www.securityfocus.com/archive/1/482366/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-060 - http://securitytracker.com/id?1018790 - http://www.us-cert.gov/cas/techalerts/TA07-282A.html - http://www.vupen.com/english/advisories/2007/3440
CVE ID: CVE-2007-3900 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2007-3901 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T14:37:04.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/threats/280.html - http://www.kb.cert.org/vuls/id/804089 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-064 - http://www.securityfocus.com/bid/26789 - https://oval.cisecurity.org/reposi
ty-updates/securitybulletins/2007/ms07-064 - http://www.securityfocus.com/bid/26789 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38721 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.securitytracker.com/id?1019073 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632 - http://secunia.com/advisories/28010 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - https://www.exploit-db.com/exploits/4866 - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://www.vupen.com/english/advisories/2007/4180
CVE ID: CVE-2007-3902 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T14:37:05.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/26506 - http://securitytracker.com/id?1019078 - http://labs.idefense.com/intelligence/vulnerabilities
urityfocus.com/bid/26506 - http://securitytracker.com/id?1019078 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=631 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://secunia.com/advisories/28036 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 - http://www.vupen.com/english/advisories/2007/4184 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://www.securityfocus.com/archive/1/484887/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-07-073.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval
itiative.com/advisories/ZDI-07-073.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/38713
CVE ID: CVE-2007-3903 State: PUBLISHED Published: 2007-12-12T00:00:00 Last Updated: 2024-08-07T14:37:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1019078 - http://www.securityfocus.com/archive/1/484888/100/0/threaded - http://www.zerodayinitiative.com/advisori
om/id?1019078 - http://www.securityfocus.com/archive/1/484888/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-07-074.html - http://www.securityfocus.com/archive/1/485268/100/0/threaded - http://secunia.com/advisories/28036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4553 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 - http://www.vupen.com/english/advisories/2007/4184 - http://www.securityfocus.com/archive/1/485268/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/38714 - http://www.us-cert.gov/cas/techalerts/TA07-345A.html - http://www.securityfocus.com/bid/26816
CVE ID: CVE-2007-3904 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.