Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/407774 - http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html?lang=en - http://marc.info/?l=bugtraq&m=111566201610350&w=2 - http://www.securityfocus.com/archive/1/407774 - http://www.vupen.com/english/advisories/2005/2806 - http://www.securityfocus.com/bid/13562 - http://secunia.com/advisories/17938 - http://www.vupen.com/english/advisories/2005/0507 - http://securitytracker.com/id?1015320 - http://www.kb.cert.org/vuls/id/302
/www.vupen.com/english/advisories/2005/0507 - http://securitytracker.com/id?1015320 - http://www.kb.cert.org/vuls/id/302220
CVE ID: CVE-2005-0040 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-07T20:57:41.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page, (2) User-Agent, or (3) Username, which is not properly quoted before sending to the error log. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15397 - http://www.securityfocus.com/bid/13644 - http://www.securityfocus.com/bid/13646 - http://www.woany.co.uk/advisories/dotnetnukexss.txt - http://marc.info/?
3644 - http://www.securityfocus.com/bid/13646 - http://www.woany.co.uk/advisories/dotnetnukexss.txt - http://marc.info/?l=bugtraq&m=111627180518591&w=2 - http://www.securityfocus.com/bid/13647
CVE ID: CVE-2005-0043 State: PUBLISHED Published: 2005-01-19T05:00:00 Last Updated: 2024-08-07T20:57:40.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/377368 - http://securitytracker.com/id?1012839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18851 - http://secunia.com/advisories/13804 - http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities - http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.h
lication/poi/display?id=180&type=vulnerabilities - http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html - http://www.osvdb.org/12833 - http://www.securityfocus.com/bid/12238
CVE ID: CVE-2005-0044 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:40.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19109 - https://oval.cisecurity.org/repository/sea
l%3Adef%3A2917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19109 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180 - http://www.kb.cert.org/vuls/id/927889 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499
CVE ID: CVE-2005-0045 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:40.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110792638401852&w=2 - https://ova
al Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=110792638401852&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19089 - http://marc.info/?l=ntbugtraq&m=110795643831169&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1606 - http://www.securityfocus.com/bid/12484 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1889 - http://www.kb.cert.org/vuls/id/652537 - https://oval.cisecurity.org/repository/search/definition/o
e.oval%3Adef%3A1889 - http://www.kb.cert.org/vuls/id/652537 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1847 - http://marc.info/?l=bugtraq&m=111040962600205&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-011
CVE ID: CVE-2005-0047 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:41.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - http
itory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - http://www.argeniss.com/research/SSExploit.c - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012 - http://marc.info/?l=bugtraq&m=111755870828817&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19105 - http://www.kb.cert.org/vuls/id/597889 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892
CVE ID: CVE-2005-0048 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T20:57:40.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3824 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1744 - http://
val%3Adef%3A3824 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1744 - http://www.kb.cert.org/vuls/id/233754 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4549 - http://xforce.iss.net/xforce/alerts/id/192 - http://www.us-cert.gov/cas/techalerts/TA05-102A.html
CVE ID: CVE-2005-0049 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:40.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/19091 - http://www.kb.cert.org/vuls/id/340409 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://docs.microsoft.com/en-us/secur
.cert.org/vuls/id/340409 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-006
CVE ID: CVE-2005-0050 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:41.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644 - https://docs.microsoft.com/en-us/securi
.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A644 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-010 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4786 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2568 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3582 - http://www.kb.cert.org/vuls/id/130433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19101
CVE ID: CVE-2005-0051 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:40.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3055 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/defini
def%3A3055 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2292 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-007 - http://securitytracker.com/id?1013112 - http://www.securityfocus.com/bid/12486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19093 - http://www.kb.cert.org/vuls/id/939074 - http://secunia.com/advisories/14189
CVE ID: CVE-2005-0053 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:41.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-008 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4726 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014 - https://oval.cisecurity.org/repository/search/definitio
oft.com/en-us/security-updates/securitybulletins/2005/ms05-014 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4864 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1334 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2046 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2953 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - http://www.kb.cert.org/vuls/id/698835 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1015 - http://www.securityfocus.com/bid/11466 - https://oval.cisecurity.org/r
h/definition/oval%3Aorg.mitre.oval%3Adef%3A1015 - http://www.securityfocus.com/bid/11466 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19117
CVE ID: CVE-2005-0054 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:40.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3196 - https://exchange.xforce.ibmcloud.com/vulnera
urity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19214 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3060 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1736 - http://marc.info/?l=bugtraq&m=110796851002781&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3586 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A130
org.mitre.oval%3Adef%3A3586 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1308 - http://www.kb.cert.org/vuls/id/580299
CVE ID: CVE-2005-0055 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:41.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137 - http://www.
005/ms05-014 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3137 - http://www.kb.cert.org/vuls/id/843771 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19137 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3910 - http://secunia.com/advisories/11165/ - http://secunia.com/secunia_research/2004-12/advisory/ - http://securitytracker.com/id?1013125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710 - https://oval.cisecu
13125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A710 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2692
CVE ID: CVE-2005-0056 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:40.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2817 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2385 - htt
re.oval%3Adef%3A2817 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2385 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-014 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - http://www.securityfocus.com/bid/12427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19137 - http://securitytracker.com/id?1013126 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4085 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4947 - http://www.kb.cert.org/vuls/id/823971 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.
947 - http://www.kb.cert.org/vuls/id/823971 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3318
CVE ID: CVE-2005-0057 State: PUBLISHED Published: 2005-02-08T05:00:00 Last Updated: 2024-08-07T20:57:41.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - http://w
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713 - http://www.us-cert.gov/cas/techalerts/TA05-039A.html - http://www.securityfocus.com/bid/12479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/19110 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203 - http://securitytracker.com/id?1013119 - http://secunia.com/advisories/14195 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570 - http://www.kb.cert.org/vuls/id/820427
CVE ID: CVE-2005-0058 State: PUBLISHED Published: 2005-08-10T04:00:00 Last Updated: 2024-08-07T20:57:41.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088 - http://www.s
ef%3A1297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088 - http://www.securityfocus.com/bid/14518 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1075 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-040 - http://securitytracker.com/id?1014639 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100086 - http://secunia.com/advisories/16354/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213 - https://
%3Adef%3A100084 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100085
CVE ID: CVE-2005-0059 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T20:57:40.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4988 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4384 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-017
CVE ID: CVE-2005-0060 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T20:57:41.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application. Additional Analyst Notes: - CVE Program Container: References: - http://www.ngssoftware.com/advisories/ms-01.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2731 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2562 - https://oval.cisecurity.org/r
ps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2562 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4797 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3941 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018 - http://marc.info/?l=bugtraq&m=111343529426926&w=2
CVE ID: CVE-2005-0061 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T20:57:40.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4593 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3994 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1761 - https://docs.microsoft.com/en-us
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1761 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1656
CVE ID: CVE-2005-0063 State: PUBLISHED Published: 2005-04-13T04:00:00 Last Updated: 2024-08-07T20:57:40.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456 - https://docs.microsoft.com/en-us/security-updates/s