Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rs to trigger use of a cached authentication decision. NOTE: authentication can be bypassed by using vector 1 followed by vector 2, and possibly can be bypassed by using a single vector. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/39548 - http://sourceforge.net/tracker/index.php?func=detail&aid=1731608&group_id=177054&atid=879703 - http://sourceforge.net/project/shownotes.php?release_id=531870 - http://www.securityfocus.com/bid/25317 - http://secunia.com/advisories/26445 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36005
CVE ID: CVE-2007-4365 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a set_lang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35992 - http://osvdb.org/36479 - http://www.securityfocus.com/archive/1/476287/100/0/threaded - http://www.i-s-o.org/security.txt - http://securityreason.com/securityalert/3021
CVE ID: CVE-2007-4366 State: PUBLISHED Published: 2007-08-15T19:00:00 Last Updated: 2024-08-07T14:53:55.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35967 - http://www.securityfocus.com/archive/1/476270/100/0/threaded - https://www.exploit-db.com/exploits/4281 - http://www.securityfocus.com/bid/25300 - http://securityreason.com/securityalert/3015
CVE ID: CVE-2007-4367 State: PUBLISHED Published: 2007-08-15T23:00:00 Last Updated: 2024-08-07T14:53:55.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an invalid pointer." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018572 - http://www.vupen.com/english/advisories/2007/2904 - http://secunia.com/advisories/26635 - http://lists.opensuse.org/opensuse-security-announce/2007-08/msg00006.html - http://www.opera.com/support/search/view/865/ - http://security.gentoo.org/glsa/glsa-200708-17.xml - h
8/msg00006.html - http://www.opera.com/support/search/view/865/ - http://security.gentoo.org/glsa/glsa-200708-17.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/36039 - http://www.securityfocus.com/bid/25331 - http://secunia.com/advisories/26545 - http://secunia.com/advisories/26477
CVE ID: CVE-2007-4368 State: PUBLISHED Published: 2007-08-15T23:00:00 Last Updated: 2024-08-07T14:53:55.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36012 - http://securityreason.com/securityalert/3012 - http://www.securityfocus.com/bid/25324 - https://www.exploit-db.com/exploits/4286 - http://www.securityfocus.com/archive/1/476475/100/0/thread
us.com/bid/25324 - https://www.exploit-db.com/exploits/4286 - http://www.securityfocus.com/archive/1/476475/100/0/threaded - http://osvdb.org/36478 - http://www.securitytracker.com/id?1018569
CVE ID: CVE-2007-4369 State: PUBLISHED Published: 2007-08-15T23:00:00 Last Updated: 2024-08-07T14:53:55.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35973 - http://www.securityfocus.com/archive/1/476268/100/0/threaded - https://www.exploit-db.com/exploits/4282 - http://www.securityfocus.com/archive/1/476445/100/0/threaded - http://secunia.com/advisories/26472 - http://www.securityfocus.com/bid/2528
yfocus.com/archive/1/476445/100/0/threaded - http://secunia.com/advisories/26472 - http://www.securityfocus.com/bid/25286
CVE ID: CVE-2007-4370 State: PUBLISHED Published: 2007-08-15T23:00:00 Last Updated: 2024-08-07T14:53:55.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25297 - https://www.exploit-db.com/exploits/4283 - http://osvdb.org/39601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35991
CVE ID: CVE-2007-4371 State: PUBLISHED Published: 2007-08-15T23:00:00 Last Updated: 2024-08-07T14:53:55.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrary PHP files in uploads/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35982 - http://securityreason.com/securityalert/3016 - http://www.securityfocus.com/archive/1/476281/100/0/threaded - http://osvdb.org/39602
CVE ID: CVE-2007-4372 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine. Additional Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000078 - h
Analyst Notes: - CVE Program Container: References: - http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000078 - http://osvdb.org/46400
CVE ID: CVE-2007-4373 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3024 - http://www.securityfocus.com/archive/1/476520/100/0/threaded - http://aluigi.altervista.org/adv/bv2x-adv.txt
CVE ID: CVE-2007-4374 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote authenticated users to spoof messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3024 - http://www.securityfocus.com/archive/1/476520/100/0/threaded - http://aluigi.altervista.org/adv/bv2x-adv.txt
CVE ID: CVE-2007-4375 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to (1) obtain sensitive information (process memory contents), as demonstrated by an attack that obtains module base addresses to defeat Address Space Layout Randomization (ASLR); or (2) cause a denial of service (application crash) via an out-of-bounds address. Additional Analyst Notes: - CVE Program Container: Reference
f service (application crash) via an out-of-bounds address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36008 - http://osvdb.org/39546 - http://osvdb.org/39547 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065245.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36007 - http://secunia.com/advisories/26431 - http://www.securityfocus.com/archive/1/476954/100/0/threaded - http://securityreason.com/securityalert/3018
CVE ID: CVE-2007-4376 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25293 - http://osvdb.org/46401 - http://securityreason.com/securityalert/3019 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35979 - http://www.securityfocus.com/archive/1/476258/100/100/threaded
CVE ID: CVE-2007-4377 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=118710179924684&w=2 - http://www.vupen.com/english/advisories/2007/2875 - https://www.exploit-db.com/exploits/4287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36009 - http://secunia.com/advisories/26464 - http:
exploits/4287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36009 - http://secunia.com/advisories/26464 - http://www.securityfocus.com/bid/25318
CVE ID: CVE-2007-4378 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Babo Violent 2 2.08.00 and earlier allow remote attackers to execute arbitrary code via format string specifiers in (1) a message or (2) certain data associated with an admin login. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36015 - http://securityreason.com/securityalert/3024 - http://www.securityfocus.com/archive/1/476520/100/0/threaded - http://aluigi.altervista.org/adv/b
m/securityalert/3024 - http://www.securityfocus.com/archive/1/476520/100/0/threaded - http://aluigi.altervista.org/adv/bv2x-adv.txt - http://www.securityfocus.com/bid/25329
CVE ID: CVE-2007-4379 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:56.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Babo Violent 2 2.08.00 and earlier allows remote attackers to cause a denial of service (application crash) via (1) a value greater than 0x27 for the (a) 0xca, (b) 0xcb, (c) 0xcc, (d) 0xce, (e) 0xcf, or (f) 0xd0 data ID; (2) a nonexistent map name; or (3) a UDP packet that specifies a large data size. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36016 - http://secunia.com/advisories/26453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36014 - http
bilities/36016 - http://secunia.com/advisories/26453 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36014 - http://securityreason.com/securityalert/3024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36017 - http://www.securityfocus.com/archive/1/476520/100/0/threaded - http://aluigi.altervista.org/adv/bv2x-adv.txt - http://www.securityfocus.com/bid/25329
CVE ID: CVE-2007-4380 State: PUBLISHED Published: 2007-08-16T18:00:00 Last Updated: 2024-08-07T14:53:55.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.irmplc.com/index.php/111-Vendor-Alerts - http://securityresponse.symantec.com/avcenter/security/Content/2007.08.13.html - http://www.irmplc.com/index.php/152-Advisory-022 - http://www.securitytracker.com/id?1018552 - http://www.securityfocus.com/bid/25232 - http://secunia.com/advisories/26435 - https://e
ecuritytracker.com/id?1018552 - http://www.securityfocus.com/bid/25232 - http://secunia.com/advisories/26435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36004 - http://www.vupen.com/english/advisories/2007/2879
CVE ID: CVE-2007-4381 State: PUBLISHED Published: 2007-08-17T21:12:00 Last Updated: 2024-08-07T14:53:55.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2008-0132.html - http://secunia.com/advisories/26933 - http://docs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/26402 - http://dev2dev.bea.c
933 - http://docs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/26402 - http://dev2dev.bea.com/pub/advisory/248 - http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html - http://secunia.com/advisories/29897 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103024-1 - http://secunia.com/advisories/28056 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://www.redhat.com/support/errata/RHSA-2008-0100.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10290 - http://www.vupen.com/english/advisories/2007/2910 - http://lists.opensuse.org/opensuse-security-announc
%3Adef%3A10290 - http://www.vupen.com/english/advisories/2007/2910 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html - http://www.redhat.com/support/errata/RHSA-2007-0956.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36061 - http://www.securitytracker.com/id?1018576 - http://secunia.com/advisories/28777 - http://www.vupen.com/english/advisories/2007/4224 - http://www.vupen.com/english/advisories/2007/3009 - http://secunia.com/advisories/28880 - http://secunia.com/advisories/27716 - http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml - http://secunia.com/advisories/28115 - http://secunia.com/advisories/29340 - http://www.securityfocus.com/bid/253
5.xml - http://secunia.com/advisories/28115 - http://secunia.com/advisories/29340 - http://www.securityfocus.com/bid/25340 - http://www.redhat.com/support/errata/RHSA-2007-1086.html - http://secunia.com/advisories/27203 - http://secunia.com/advisories/26631
CVE ID: CVE-2007-4382 State: PUBLISHED Published: 2007-08-17T21:12:00 Last Updated: 2024-08-07T14:53:55.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35975 - http://www.securityfocus.com/bid/25299 - http://www.securityfocus.com/archive/1/476259/100/100/threaded - http://securityreason.com/securityalert/3027
CVE ID: CVE-2007-4383 State: PUBLISHED Published: 2007-08-17T21:12:00 Last Updated: 2024-08-07T14:53:55.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: CVE and a third party dispute this vulnerability because header is defined before use. The researcher is known to be unreliable Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36046 - http://www.securityfocus.com/archive/1/476671/100/0/threaded - http://www.securityfocus.com/archive/1/476757/100/
6046 - http://www.securityfocus.com/archive/1/476671/100/0/threaded - http://www.securityfocus.com/archive/1/476757/100/0/threaded
CVE ID: CVE-2007-4384 State: PUBLISHED Published: 2007-08-17T21:12:00 Last Updated: 2024-08-07T14:53:55.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary PHP code via a URL in the (1) NomVote and (2) FilePalHex parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36047 - http://www.securityfocus.com/bid/25335 - http://www.securityfocus.com/archive/1/476672/100/0/threaded
CVE ID: CVE-2007-4385 State: PUBLISHED Published: 2007-08-17T21:12:00 Last Updated: 2024-08-07T14:53:55.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-urlencoded requests. NOTE: this might be used to expose vulnerabilities in applications that would otherwise be protected by the validation routines. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/476288/100/0/threaded - http://secunia.com/advisories/26441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35981 - http://securityrea
- http://secunia.com/advisories/26441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35981 - http://securityreason.com/securityalert/3035 - http://osvdb.org/39544 - http://www.securitytracker.com/id?1018555 - http://o0o.nu/~meder/o0o_bypassing_servlet_input_validation_filters.txt - http://www.securityfocus.com/bid/25294
CVE ID: CVE-2007-4386 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25345 - http://www.osvdb.org/36510 - https://www.exploit-db.com/exploits/4291 - http://secunia.com/advisories/26502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36083
CVE ID: CVE-2007-4387 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36044 - http://securityreason.com/securityalert/3026 - http://www.securityfocus.com/archive/1/476595/100/0/threaded - http://secunia.com/advisories/26496 - http://osvdb.org/37667
CVE ID: CVE-2007-4388 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3026 - http://www.securityfocus.com/archive/1/476595/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36043
CVE ID: CVE-2007-4389 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36044 - http://securityreason.com/securityalert/3026 - http://www.securityfocus.com/archive/1/476595/100/0/threaded - http://www.
ttp://securityreason.com/securityalert/3026 - http://www.securityfocus.com/archive/1/476595/100/0/threaded - http://www.securityfocus.com/bid/27246 - http://www.hakim.ws/2wire/demodns.html
CVE ID: CVE-2007-4390 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local admin users to gain root privileges on the underlying operating system via shell metacharacters in a command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26495 - http://www.securityfocus.com/bid/25342 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36082 - http://www.securitytracker.com/id?1018584 - http://securityreason.com/securit
force.ibmcloud.com/vulnerabilities/36082 - http://www.securitytracker.com/id?1018584 - http://securityreason.com/securityalert/3025 - http://www.securityfocus.com/archive/1/476785/100/0/threaded - http://osvdb.org/39398 - http://www.securityfocus.com/archive/1/477163/100/0/threaded
CVE ID: CVE-2007-4391 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application crash) via a certain length field in JPEG2000 data, as demonstrated by sending an "invite to view my webcam" request, and then injecting a DLL into the attacker's peer Yahoo! Messenger application when this request is accepted. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2917 - https://exchange.xforce.ibmcloud.com/vuln
m Container: References: - http://www.vupen.com/english/advisories/2007/2917 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36115 - http://www.kb.cert.org/vuls/id/515968 - http://www.avertlabs.com/research/blog/index.php/2007/08/15/more-on-the-yahoo-messenger-webcam-0day/ - http://www.team509.com/expyahoo.rar - http://secunia.com/advisories/26501 - http://www.securityfocus.com/bid/25330 - http://osvdb.org/38221 - http://www.securitytracker.com/id?1018586 - https://www.xfocus.net/bbs/index.php?act=ST&f=2&t=64639&page=1#entry321749
CVE ID: CVE-2007-4392 State: PUBLISHED Published: 2007-08-17T22:00:00 Last Updated: 2024-08-07T14:53:55.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursively includes itself. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/475489/100/200/threaded - http://morph3us.org/advisories/20070730-winamp-5.35.txt - http://securityreason.com/securityalert/3040 - http://www.securityfocus.com/archive/1/475260/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mi