Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - http://www.securityfocus.com/archive/1/455790/100/0/threaded - http://securitytracker.com/id?1023007 - http://secunia.com/advisories/23882 - http://www.securityfocus.com/archive/1/455801/100/0/threaded - http://www.vupen.com/english/advisories/2007/0032 - http://secunia.com/advisories/24457 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31271 - http://www.securityfocus.com/archive/1/455831/100/0/threaded - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.mozilla.org/security/announce/2007/mf
aded - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://www.mozilla.org/security/announce/2007/mfsa2007-02.html - http://securityreason.com/securityalert/2090 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1 - http://secunia.com/advisories/33754 - http://www.vupen.com/english/advisories/2007/0957 - http://www.securityfocus.com/archive/1/455836/100/0/threaded - http://secunia.com/advisories/23812 - http://www.securityfocus.com/archive/1/455906/100/0/threaded - http://securitytracker.com/id?1017469 - http://www.adobe.com/support/security/advisories/apsa07-01.html - http://www.ado
http://securitytracker.com/id?1017469 - http://www.adobe.com/support/security/advisories/apsa07-01.html - http://www.adobe.com/support/security/advisories/apsa07-02.html - http://secunia.com/advisories/23483 - http://secunia.com/advisories/23877 - http://www.gnucitizen.org/blog/universal-pdf-xss-after-party - http://www.adobe.com/support/security/bulletins/apsb07-01.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9693 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6487 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.vupen.com/english/advisories/2009/2898 - h
w2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.vupen.com/english/advisories/2009/2898 - http://www.gnucitizen.org/blog/danger-danger-danger/ - http://security.gentoo.org/glsa/glsa-200701-16.xml - http://secunia.com/advisories/24533 - http://www.disenchant.ch/blog/hacking-with-browser-plugins/34 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.kb.cert.org/vuls/id/815960 - http://www.securityfocus.com/archive/1/455800/100/0/threaded - http://www.wisec.it/vulns.php?page=9
CVE ID: CVE-2007-0046 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T12:03:36.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0021.html - http://secunia.com/advisories/23691 - https://rhn.redhat.com/errata/RHSA-2007-0017.html - http://events.ccc.de/congress/
http://secunia.com/advisories/23691 - https://rhn.redhat.com/errata/RHSA-2007-0017.html - http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - http://secunia.com/advisories/23882 - http://www.securityfocus.com/archive/1/455801/100/0/threaded - http://www.vupen.com/english/advisories/2007/0032 - http://securityreason.com/securityalert/2090 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1 - http://www.vupen.com/english/advisories/2007/0957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9684 - http://secunia.com/advisories/23812 - h
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9684 - http://secunia.com/advisories/23812 - http://securitytracker.com/id?1017469 - http://secunia.com/advisories/23877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31272 - http://www.adobe.com/support/security/bulletins/apsb07-01.html - http://security.gentoo.org/glsa/glsa-200701-16.xml - http://secunia.com/advisories/24533 - http://www.wisec.it/vulns.php?page=9
CVE ID: CVE-2007-0047 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T12:03:36.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31291 - http://events.ccc.de/congress/2006/Fahrplan/attachmen
es: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31291 - http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - http://secunia.com/advisories/23882 - http://www.vupen.com/english/advisories/2007/0032 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html - http://securitytracker.com/id?1017469
CVE ID: CVE-2007-0048 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T12:03:36.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://googlechrom
Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA09-286B.html - http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html - http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf - http://securitytracker.com/id?1023007 - http://secunia.com/advisories/23882 - http://www.securityfocus.com/archive/1/455801/100/0/threaded - http://www.vupen.com/english/advisories/2007/0032 - http://www.adobe.com/support/security/bulletins/apsb09-15.html - http://securityreason.com/securityalert/2090 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6348 - http://lists.suse.com/arch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6348 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html - http://secunia.com/advisories/33754 - http://secunia.com/advisories/23812 - http://securitytracker.com/id?1017469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31273 - http://www.adobe.com/support/security/bulletins/apsb07-01.html - http://www.vupen.com/english/advisories/2009/2898 - http://security.gentoo.org/glsa/glsa-200701-16.xml - http://osvdb.org/31596 - http://www.wisec.it/vulns.php?page=9
CVE ID: CVE-2007-0049 State: PUBLISHED Published: 2007-01-04T11:00:00 Last Updated: 2024-08-07T12:03:36.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31682 - http://secunia.com/advisories/23564 - http://www.securityfocus.com/bid/21847 - https://www.exploit-db.com/exploits/3068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31235
CVE ID: CVE-2007-0050 State: PUBLISHED Published: 2007-01-04T11:00:00 Last Updated: 2024-08-07T12:03:37.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests that there is a small time window of risk before the installation is complete Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455795/100/0/threaded - http://www.securityfocus.com/ar
Container: References: - http://www.securityfocus.com/archive/1/455795/100/0/threaded - http://www.securityfocus.com/archive/1/455818/100/0/threaded - http://archives.neohapsis.com/archives/bugtraq/2007-01/0176.html - http://osvdb.org/33375
CVE ID: CVE-2007-0051 State: PUBLISHED Published: 2007-01-04T18:00:00 Last Updated: 2024-08-07T12:03:36.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23615 - http://www.securityfocus.com/archive/1/455968/100/0/threaded - http://www.securityfocus.com/bid/21871 - http://projects.info-pull.com/moab/MOAB-04-01-2007.html - http://docs.info.apple.
tp://www.securityfocus.com/bid/21871 - http://projects.info-pull.com/moab/MOAB-04-01-2007.html - http://docs.info.apple.com/article.html?artnum=305215 - http://osvdb.org/31165 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0100.html - http://lists.apple.com/archives/security-announce/2007/Mar//msg00003.html - http://www.vupen.com/english/advisories/2007/0057 - http://www.digitalmunition.com/DMA%5B2007-0104a%5D.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/31281 - https://www.exploit-db.com/exploits/3080
CVE ID: CVE-2007-0052 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:36.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3061 - http://secunia.com/advisories/23576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31213 - http://www.vupen.com/english/advisories/2007/0015 - http://osvdb.org/31518 - http://www.securityfocus.com/bid/21836
CVE ID: CVE-2007-0053 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:36.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32539 - http://www.securityfocus.com/bid/21833 - http://secunia.com/advisories/23572 - https://www.exploit-db.com/exploits/3062 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31219 - http://www.vupen.com/english/advisories/2007/0016
CVE ID: CVE-2007-0054 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:36.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455615/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31182 - http://www.securityfocus.com/bid/21844 - http://osvdb.org/33359
CVE ID: CVE-2007-0055 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:37.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the Name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31214 - http://osvdb.org/32545 - https://www.exploit-db.com/exploits/3063 - http://www.vupen.com/english/ad
nerabilities/31214 - http://osvdb.org/32545 - https://www.exploit-db.com/exploits/3063 - http://www.vupen.com/english/advisories/2007/0012 - http://secunia.com/advisories/23539
CVE ID: CVE-2007-0056 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:37.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php and (b) ashop/basket.php, the (2) exp parameter to ashop/catalogue.php, the (3) searchstring parameter to (c) ashop/search.php, the (4) checkout and (5) action parameters to (d) ashop/shipping.php, the cat parameter to (f) cart-path/admin/editcatalogue.php, and the (7) resultpage parameter to (g) cart-path/admin/
hp, the cat parameter to (f) cart-path/admin/editcatalogue.php, and the (7) resultpage parameter to (g) cart-path/admin/salesadmin.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23547 - http://www.securityfocus.com/archive/1/455629/100/0/threaded - http://www.securityfocus.com/bid/21845 - http://securityreason.com/securityalert/2091 - http://osvdb.org/32553 - http://osvdb.org/32556 - http://osvdb.org/32554 - http://osvdb.org/32558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31178 - http://osvdb.org/32555 - http://osvdb.org/32557 - http://www.vupen.com/english/advisories/2007/0028
CVE ID: CVE-2007-0057 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:36.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23617 - http://www.vupen.com/english/advisories/2007/0030 - http://osvdb.org/32578 - http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml - ht
ories/2007/0030 - http://osvdb.org/32578 - http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml - http://securitytracker.com/id?1017465
CVE ID: CVE-2007-0058 State: PUBLISHED Published: 2007-01-04T22:00:00 Last Updated: 2024-08-07T12:03:36.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23556 - http://www.osvdb.org/32579 - http://www.vupen.com/english/advisories/2007/0030 - http://www.cisco.com/warp/public/707/cisco-sa-20070
svdb.org/32579 - http://www.vupen.com/english/advisories/2007/0030 - http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml - http://securitytracker.com/id?1017465
CVE ID: CVE-2007-0059 State: PUBLISHED Published: 2007-01-05T00:00:00 Last Updated: 2024-08-07T12:03:36.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI, which is executed in a local zone during preview, as exploited by a MySpace worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/304064 - http://osvdb.org/31164 - http://www.gnucitizen.org/blog/backdooring-qui
ences: - http://www.kb.cert.org/vuls/id/304064 - http://osvdb.org/31164 - http://www.gnucitizen.org/blog/backdooring-quicktime-movies/ - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://projects.info-pull.com/moab/MOAB-03-01-2007.html - http://docs.info.apple.com/article.html?artnum=305149
CVE ID: CVE-2007-0060 State: PUBLISHED Published: 2007-07-26T00:00:00 Last Updated: 2024-08-07T12:03:36.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/dto_tr
port 3104. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp - http://www.vupen.com/english/advisories/2007/2638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 - http://www.securitytracker.com/id?1018449 - http://secunia.com/advisories/26190 - http://www.securityfocus.com/archive/1/474602/100/0/threaded - http://www.securityfocus.com/bid/25051 - http://www.iss.net/threats/272.html - http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
CVE ID: CVE-2007-0061 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T12:03:37.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory." Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - htt
CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.securityfocus.com/bid/25729 - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://www.ubuntu.com/usn/usn-543-1 - http://www.securitytracker.com/id?1018717 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/27694 - http://www.iss.net/threats/275.html - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33101 - http://secunia.c
rt/player2/doc/releasenotes_player2.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33101 - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/27706 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
CVE ID: CVE-2007-0062 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T12:03:37.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stac
mon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.securityfocus.com/bid/25729 - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://www.securityfocus.com/archive/1/501759/100/0/threaded - http://www.ubuntu.com/usn/usn-543-1 - http://www.securitytracker.com/id?1018717 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/27694 - http://secuni
com/id?1018717 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/27694 - http://secunia.com/advisories/31396 - http://www.iss.net/threats/275.html - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://wiki.rpath.com/Advisories:rPSA-2009-0041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33102 - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - https://bugzilla.redhat.com/show_bug.cgi?id=339561 - http://security.gentoo.org/glsa/glsa-200808-05.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2009:153 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://lists.opensuse.org/opensu
=MDVSA-2009:153 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html - http://secunia.com/advisories/26890 - http://www.vmware.com/support/ace/doc/releasenotes_ace.html - http://secunia.com/advisories/34263 - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/27706 - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://bugs.gentoo.org/show_bug.cgi?id=227135
CVE ID: CVE-2007-0063 State: PUBLISHED Published: 2007-09-21T18:00:00 Last Updated: 2024-08-07T12:03:37.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure
low. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.securityfocus.com/bid/25729 - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://www.ubuntu.com/usn/usn-543-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33103 - http://www.securitytracker.com/id?1018717 - http://www.vupen.com/english/advisories/2007/3229 - http://secunia.com/advisories/27694 - http://www.iss.net/threats/275.html - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://www.vmware.com/support/player2/doc/releasenote