Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rityreason.com/securityalert/3037 - http://aluigi.org/poc/rfactorx.zip - http://www.rfactor.net/?page=news_09-26_1255 - http://www.securityfocus.com/archive/1/480921/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36093 - http://www.securityfocus.com/archive/1/480591/100/200/threaded - http://www.securityfocus.com/archive/1/477023/100/0/threaded - http://secunia.com/advisories/26526
CVE ID: CVE-2007-4445 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an ID 0x38 packet, and an invalid 13-bit integer in (3) an ID 0x60 packet and (4) an ID 0x68 packet; and a denial of service (UDP port block) via (5) an ID 0x20 packet and (6) an ID 0x28 packet. Additional Analyst Notes: - CVE Program Container: References: - http://forum.racesimcentral.com/showthread.php?t=298659 - http://www.securityfocus.com/bid/25358 - http://securityreason.com/securityal
cesimcentral.com/showthread.php?t=298659 - http://www.securityfocus.com/bid/25358 - http://securityreason.com/securityalert/3037 - http://aluigi.org/poc/rfactorx.zip - http://www.rfactor.net/?page=news_09-26_1255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36094 - http://www.securityfocus.com/archive/1/480921/100/200/threaded - http://www.securityfocus.com/archive/1/480591/100/200/threaded - http://www.securityfocus.com/archive/1/477023/100/0/threaded - http://secunia.com/advisories/26526
CVE ID: CVE-2007-4446 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4447 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:56.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application crash) via a long SAY command that omits a required LF character; and allow remote Toribash servers to execute arbitrary code via (3) a long game command and (4) a long SAY command that omits a required LF character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/arch
equired LF character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36097 - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4448 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP command with the ID of -1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36098 - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.c
ulnerabilities/36098 - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4449 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:56.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a command without an LF character, as demonstrated by a SAY command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4450 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:56.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is not clear, although it probably makes exploitation of CVE-2007-4449 easier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - http://aluigi.org/poc/toribashish
ontainer: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4451 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous beep and server hang) via certain commands that contain many 0x07 or other invalid characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/477025/100/0/threaded - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4452 State: PUBLISHED Published: 2007-08-21T00:00:00 Last Updated: 2024-08-07T14:53:55.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long (1) emote or (2) SPEC command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36100 - http://www.securityfocus.com/archive/1/477025/100/0/threaded - http://aluigi.org/poc/toribashish.zip - http://www.securityfocus.com/bid/25359 - http://secunia.com/advisories/26507 - http://securityreason.com/securityalert/3033
CVE ID: CVE-2007-4453 State: PUBLISHED Published: 2007-08-21T18:00:00 Last Updated: 2024-08-07T14:53:55.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the (1) s parameter to index.php, and the (2) q parameter to (a) faq.php, (b) member.php, (c) memberlist.php, (d) calendar.php, (e) search.php, (f) forumdisplay.php, (g) showgroups.php, (h) online.php, and (i) sendmessage.php. NOTE: these issues have been disputed by the vendor, stating "I can't reproduce a single one of these". The researcher is known to be unreliable Additional Analyst Notes:
r, stating "I can't reproduce a single one of these". The researcher is known to be unreliable Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/476940/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36084 - http://www.securityfocus.com/archive/1/476924/100/0/threaded
CVE ID: CVE-2007-4454 State: PUBLISHED Published: 2007-08-21T18:00:00 Last Updated: 2024-08-07T14:53:56.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code via a crafted version string, as referenced by the (1) PDO::ATTR_SERVER_VERSION or (2) PDO::ATTR_CLIENT_VERSION attribute. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3038 - http://myimei.com/security/2007-08-17/olate-download-341-environmentphpphp-code-execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36087 - h
late-download-341-environmentphpphp-code-execution.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36087 - http://sourceforge.net/project/shownotes.php?group_id=188052&release_id=533628 - http://www.securityfocus.com/bid/25356 - http://www.securityfocus.com/archive/1/476925/100/0/threaded - http://www.securityfocus.com/archive/1/477223/100/0/threaded
CVE ID: CVE-2007-4455 State: PUBLISHED Published: 2007-08-22T01:00:00 Last Updated: 2024-08-07T14:53:55.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large number of history entries to be created. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3047 - http://www.vupen.com/english/advisories/2007/2953 - http://downlo
nces: - http://securityreason.com/securityalert/3047 - http://www.vupen.com/english/advisories/2007/2953 - http://downloads.digium.com/pub/asa/AST-2007-020.html - http://www.securityfocus.com/bid/25392 - http://seclists.org/fulldisclosure/2007/Aug/0393.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36145 - http://secunia.com/advisories/26553 - http://www.securitytracker.com/id?1018595
CVE ID: CVE-2007-4456 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:55.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the SimpleFAQ (com_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitrary SQL commands via the aid parameter. NOTE: it was later reported that 2.40 is also affected, and that the component can be used in Joomla! in addition to Mambo. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36113 - http://secunia.com/advisories/26556 - http://www.securi
1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36113 - http://secunia.com/advisories/26556 - http://www.securityfocus.com/archive/1/477232/100/0/threaded - https://www.exploit-db.com/exploits/4296 - http://www.securityfocus.com/bid/25376 - http://www.securityfocus.com/archive/1/477174/100/0/threaded
CVE ID: CVE-2007-4457 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:55.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36140 - http://www.securityfocus.com/bid/25361 - http://www.securityfocus.com/archive/1/477238/100/0/threaded - http://osvdb.org/37831
CVE ID: CVE-2007-4458 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:55.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/class/class_tpl.php in Firesoft allows remote attackers to execute arbitrary PHP code via a URL in the cache_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37699 - http://www.securityfocus.com/bid/25366 - http://www.securityfocus.com/archive/1/477243/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36143
CVE ID: CVE-2007-4459 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:56.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE message that contains a remote tag, followed by a certain set of two related SIP OPTIONS messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
Container: References: - http://www.securityfocus.com/bid/25378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36125 - http://www.cisco.com/warp/public/707/cisco-sr-20070821-sip.shtml - http://secunia.com/advisories/26547 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065401.html - http://securityreason.com/securityalert/3042 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065402.html - http://securitytracker.com/id?1018591 - http://www.vupen.com/english/advisories/2007/2928 - http://www.osvdb.org/36695
CVE ID: CVE-2007-4460 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:56.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438540 - http://secunia.com/advisories/26646 - http://www.novell.com/linux/security/advisories/2007_19_sr.html - http://secunia.com/advisories/26818 - https://bugzilla.redhat.com/bugzilla/show
ux/security/advisories/2007_19_sr.html - http://secunia.com/advisories/26818 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253553 - http://secunia.com/advisories/26536 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:180 - http://secunia.com/advisories/26987 - http://www.securityfocus.com/bid/25372 - http://security.gentoo.org/glsa/glsa-200709-08.xml - http://www.securitytracker.com/id?1018667 - http://secunia.com/advisories/26793 - http://www.debian.org/security/2007/dsa-1365
CVE ID: CVE-2007-4461 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:55.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules via certain "out of period" choices of packet transmission time. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26546 - http://osvdb.org/39725 - http://www.securityfocus.com/bid/25379 - http://www.nufw.org/+NuFW-2-2-4%2C201+.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36134
CVE ID: CVE-2007-4462 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:55.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26492 - http://security.gentoo.org/glsa/glsa-200709-04.xml - http://www.securityfocus.com/bid/25402 - http://alioth.debian.org/frs/shownotes.php?release_id=1019 - http://secunia.com/advisories/26810 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253541 - http://bugs.gen
19 - http://secunia.com/advisories/26810 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=253541 - http://bugs.gentoo.org/show_bug.cgi?id=189440
CVE ID: CVE-2007-4463 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:56.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via an invalid RVA address function pointer in (1) an IMAGE_THUNK_DATA structure, involving the (a) OriginalFirstThunk and (b) FirstThunk IMAGE_IMPORT_DESCRIPTOR fields, or (2) the AddressOfNames IMAGE_EXPORT_DIRECTORY field in a PE file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36126 - http://blog.hispasec.com/lab/adv
m Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36126 - http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt - http://blog.hispasec.com/lab/230 - http://www.securityfocus.com/bid/25373 - http://www.securityfocus.com/archive/1/477170/100/0/threaded - http://securityreason.com/securityalert/3044 - http://osvdb.org/46835
CVE ID: CVE-2007-4464 State: PUBLISHED Published: 2007-08-21T21:00:00 Last Updated: 2024-08-07T14:53:55.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGE_EXPORT_DIRECTORY array in a PE file, which could complicate forensics investigations. Additional Analyst Notes: - CVE Program Container: References: - http://blog.hispasec.com/lab/advisories/adv_Fileinfo-2_09_multiple_vulnerabilities.txt - http://blog.hispasec.com/lab/230 - http://osvdb.org/46834 - http://www.securi
leinfo-2_09_multiple_vulnerabilities.txt - http://blog.hispasec.com/lab/230 - http://osvdb.org/46834 - http://www.securityfocus.com/archive/1/477170/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36127 - http://securityreason.com/securityalert/3044
CVE ID: CVE-2007-4465 State: PUBLISHED Published: 2007-09-14T00:00:00 Last Updated: 2025-01-17T14:50:38.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.redhat.com/support/err
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.redhat.com/support/errata/RHSA-2008-0005.html - http://securityreason.com/securityalert/3113 - http://secunia.com/advisories/28749 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6089 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://secunia.com/advisories/26952 - http://secunia.com/advisories/31651 - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - http://www.securityfocus.com/bid/25653 - http://secunia.com/advisories/27563 - http://secunia.com/advisories/27732 - http://securitytracker.com/id?1019194 - http://www.redhat.com/support/errata/R
3 - http://secunia.com/advisories/27732 - http://securitytracker.com/id?1019194 - http://www.redhat.com/support/errata/RHSA-2007-0911.html - http://www.redhat.com/support/errata/RHSA-2008-0006.html - http://www.securityfocus.com/archive/1/479237/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10929 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.us-cert.gov/cas/techalerts/TA08-150A.html - http://www.novell.com/linux/security/advisories/2007_61_apache2.html - http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html - http://www.redhat.com/support/errata/RHSA-2008-0008.html - http://www.mandriva
e-announce/2007-September/msg00320.html - http://www.redhat.com/support/errata/RHSA-2008-0008.html - http://www.mandriva.com/security/advisories?name=MDVSA-2008:014 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 - http://secunia.com/advisories/30430 - http://www.apache.org/dist/httpd/CHANGES_2.2.6 - http://lists.apple.com/archives/security-announce/2008//May/msg00001.html - http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm - http://secunia.com/advisories/33105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36586 - http://secunia.com/advisories/28467 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.h
//secunia.com/advisories/28467 - http://www.fujitsu.com/global/support/software/security/products-f/interstage-200807e.html - http://www.redhat.com/support/errata/RHSA-2008-0004.html - http://secunia.com/advisories/28607 - http://security.gentoo.org/glsa/glsa-200711-06.xml - http://marc.info/?l=bugtraq&m=124654546101607&w=2 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00353.html - http://secunia.com/advisories/28471 - http://www.vupen.com/english/advisories/2008/1697 - http://securityreason.com/achievement_securityalert/46 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.ubuntu.com/usn/usn-575-1 - http://secunia.com/advisories/26842 - htt
com/support/errata/RHSA-2008-0261.html - http://www.ubuntu.com/usn/usn-575-1 - http://secunia.com/advisories/26842 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 - http://secunia.com/advisories/35650 - http://bugs.gentoo.org/show_bug.cgi?id=186219
CVE ID: CVE-2007-4466 State: PUBLISHED Published: 2007-10-09T22:00:00 Last Updated: 2024-08-07T14:53:55.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote attackers to execute arbitrary code via unspecified methods and parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3415 - http://www.securityfocus.com/bid/25970 - http://secunia.com/advisories/27143 - http://osvdb.org/37723 - http://www.kb.cert.org/vuls/id/179281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37020
CVE ID: CVE-2007-4467 State: PUBLISHED Published: 2007-08-31T00:00:00 Last Updated: 2024-08-07T14:53:56.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms applications from Oracle and third parties, allow remote attackers to execute arbitrary code via unspecified "initialization parameters." NOTE: it was later reported that 1.1.8.3 through 1.1.8.25, and probably 1.1.5.x and 1.1.7.x, are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vuln
E Program Container: References: - http://www.integrigy.com/security-resources/analysis/integrigy-oracle-jinitiator-vulnerability.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/36310 - http://securitytracker.com/id?1018618 - http://www.vupen.com/english/advisories/2007/3007 - http://secunia.com/advisories/26644 - http://www.kb.cert.org/vuls/id/474433 - http://osvdb.org/37711 - http://www.securityfocus.com/bid/25473 - http://www.securityfocus.com/archive/1/479186/100/100/threaded