Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-5325 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/37063 - http://www.securityfocus.com/archive/1/482121/100/0/threaded - ht
//exchange.xforce.ibmcloud.com/vulnerabilities/37063 - http://www.securityfocus.com/archive/1/482121/100/0/threaded - http://www.securityfocus.com/bid/26015 - http://www.securitytracker.com/id?1018805 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5326 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - http://osvdb.org/41368 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://secunia.com/secunia_research/2007-49/advisory/ - http://www.securityfocus.com/archive/1/482121/100/0/threaded -
- http://secunia.com/secunia_research/2007-49/advisory/ - http://www.securityfocus.com/archive/1/482121/100/0/threaded - http://www.securityfocus.com/bid/26015 - http://www.securitytracker.com/id?1018805 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5327 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a long argument in the 0x10d opnum. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/37064 - http://secunia.com/advisories/27192 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://securityreason.com/securit
ies/27192 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://securityreason.com/securityalert/3218 - http://ruder.cdut.net/blogview.asp?logID=231 - http://www.securityfocus.com/archive/1/482112/100/0/threaded - http://www.fortiguardcenter.com/advisory/FGA-2007-11.html - http://www.securityfocus.com/archive/1/482121/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37065 - http://www.securityfocus.com/bid/26015 - http://www.securitytracker.com/id?1018805 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5328 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37067 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://www.security
m/vulnerabilities/37067 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://www.securityfocus.com/archive/1/484229/100/0/threaded - http://www.securityfocus.com/archive/1/482121/100/0/threaded - http://www.securityfocus.com/bid/26015 - http://www.zerodayinitiative.com/advisories/ZDI-07-069.html - http://www.securitytracker.com/id?1018805 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5329 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, has unknown impact and attack vectors related to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/37068 - http://www.securityfocus.com/archive/1/482121/100/0/threaded - http://osvdb.org/41372 - http://www.securit
ities/37068 - http://www.securityfocus.com/archive/1/482121/100/0/threaded - http://osvdb.org/41372 - http://www.securityfocus.com/bid/26015 - http://www.securitytracker.com/id?1018805 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5330 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to (1) execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and (2) trigger memory corruption related to the use of "handle" RPC arguments as pointers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - http://osvdb.org/41374 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://osvdb.o
192 - http://osvdb.org/41374 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://osvdb.org/41373 - http://secunia.com/secunia_research/2007-62/advisory/ - http://www.securityfocus.com/archive/1/482121/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37070 - http://www.securityfocus.com/bid/26015 - http://www.securitytracker.com/id?1018805 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5331 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Queue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to execute arbitrary code via a malformed ONRPC protocol request for operation 0x76, which causes ARCserve Backup to dereference arbitrary pointers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://www.securityfocus.com/bid/24680 -
2 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://www.securityfocus.com/bid/24680 - http://www.securityfocus.com/archive/1/482114/100/0/threaded - http://www.securityfocus.com/archive/1/482121/100/0/threaded - http://research.eeye.com/html/advisories/published/AD20071011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/37071 - http://www.securitytracker.com/id?1018805 - http://osvdb.org/41371 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5332 State: PUBLISHED Published: 2007-10-13T00:00:00 Last Updated: 2024-08-07T15:24:42.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, have unknown impact and attack vectors related to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/27192 - http://osvdb.org/41366 - http://supportconnectw.ca.com/public/storage/infodocs/basb-secnotice.asp - http://www.securityfocus.com/bid/24017 - http://www.securityfocus.com/archive/1/482121/100/0/threaded - ht
cnotice.asp - http://www.securityfocus.com/bid/24017 - http://www.securityfocus.com/archive/1/482121/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37072 - http://www.securitytracker.com/id?1018805 - http://osvdb.org/41367 - http://www.vupen.com/english/advisories/2007/3470
CVE ID: CVE-2007-5333 State: PUBLISHED Published: 2008-02-12T00:00:00 Last Updated: 2024-08-07T15:24:42.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2690 - http://secun
l Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2690 - http://secunia.com/advisories/33330 - http://tomcat.apache.org/security-4.html - http://support.apple.com/kb/HT2163 - http://secunia.com/advisories/30676 - http://www.securityfocus.com/bid/27706 - http://securityreason.com/securityalert/3636 - http://jvn.jp/jp/JVN%2309470767/index.html - http://www.vupen.com/english/advisories/2008/1981/references - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20133 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11177 - http://secunia.com/advisories/28915 - http://secunia.com/advisories/37460 - http://www
%3Aorg.mitre.oval%3Adef%3A11177 - http://secunia.com/advisories/28915 - http://secunia.com/advisories/37460 - http://www-1.ibm.com/support/docview.wss?uid=swg1IZ20991 - http://www.securityfocus.com/bid/31681 - http://secunia.com/advisories/28884 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://www.securityfocus.com/archive/1/487822/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg27012048 - http://secunia.com/advisories/28878 - http://secunia.com/advisories/32036 - http://www.vupen.com/english/advisories/2008/0488 - http://secunia.com/advisories/44183 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.mandriva.com
m/advisories/44183 - http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:176 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:018 - http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp08/html-single/Release_Notes/index.html - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://secunia.com/advisories/32222 - http://secunia.com/advisories/30802 - http://www-01.ibm.com/support/docview.wss?uid=swg2701
cunia.com/advisories/32222 - http://secunia.com/advisories/30802 - http://www-01.ibm.com/support/docview.wss?uid=swg27012047 - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00315.html - http://security.gentoo.org/glsa/glsa-200804-10.xml - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00460.html - http://www.vupen.com/english/advisories/2008/1856/references - http://www.vmware.com/security/advisories/VMSA-2008-0010.html - http://tomcat.apache.org/security-5.html - http://www.vupen.com/english/advisories/2008/2780 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html -
/marc.info/?l=bugtraq&m=139344343412337&w=2 - http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - http://support.apple.com/kb/HT3216 - http://www-01.ibm.com/support/docview.wss?uid=swg24018932 - http://secunia.com/advisories/29711 - http://www.vupen.com/english/advisories/2009/3316 - https://bugzilla.redhat.com/show_bug.cgi?id=532111 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507
%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2007-5334 State: PUBLISHED Published: 2007-10-21T20:00:00 Last Updated: 2024-08-07T15:24:42.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks by setting the hidechrome attribute. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.vupen.com/english/advisories/2007/3587 - http://s
//www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml - http://secunia.com/advisories/27360 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://secunia.com/advisories/27315 - http://securitytracker.com/id?1018837 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://usn.ubuntu.
es/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://usn.ubuntu.com/535-1/ - http://www.debian.org/security/2007/dsa-1401 - http://www.debian.org/security/2007/dsa-1392 - http://www.kb.cert.org/vuls/id/349217 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - https://bugzilla.mozilla.org/show_bug.cgi?id=391043 - https://www.redhat.com/a
3 - http://secunia.com/advisories/27387 - https://bugzilla.mozilla.org/show_bug.cgi?id=391043 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html - http://secunia.com/advisories/27403 - http://secunia.com/advisories/27336 - http://www.mozilla.org/security/announce/2007/mfsa2007-33.html - http://www.debian.org/security/2007/dsa-1396 - http://secunia.com/advisories/27425 - http://secunia.com/advisories/28398 - http://secunia.com/advisories/27311 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27325 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - https://exchange.xforce.ib
a.com/advisories/27325 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37286 - http://secunia.com/advisories/27665 - http://www.redhat.com/support/errata/RHSA-2007-0979.html - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://secunia.com/advisories/27480 - http://secunia.com/advisories/27680 - http://www.securityfocus.com/bid/26132 - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/thre
/sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/threaded - http://www.ubuntu.com/usn/usn-536-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11482
CVE ID: CVE-2007-5335 State: PUBLISHED Published: 2007-10-24T00:00:00 Last Updated: 2024-08-07T15:24:42.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain sensitive system information by using the addMicrosummaryGenerator sidebar method to access file: URIs. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml - https://bugzilla.mozilla.org/show_bug.cgi?id=390983 - https://usn.ubuntu.com/535-1/ - http://secunia.com/advisories/27387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37428 - http://secunia.com/advisories/27665 - http://secu
s/27387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/37428 - http://secunia.com/advisories/27665 - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://osvdb.org/42470
CVE ID: CVE-2007-5336 State: REJECTED Published: 2007-10-24T00:00:00Z Last Updated: 2024-09-17T00:15:27.373Z Description: No description available.
CVE ID: CVE-2007-5337 State: PUBLISHED Published: 2007-10-21T20:00:00 Last Updated: 2024-08-07T15:24:42.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://w
m Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/37287 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11443 - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml - http://secunia.com/advisories/27360 - http://www.mozilla.org/security/announce/2007/mfsa2007-34.html - http://h
14.xml - http://secunia.com/advisories/27360 - http://www.mozilla.org/security/announce/2007/mfsa2007-34.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://securitytracker.com/id?1018837 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://usn.ubuntu.com/535-1/ - http://www.debian.org/security/2007/dsa-1401 - http://www.debian.org/security/2007/dsa-1392 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - https
tml - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - https://bugzilla.mozilla.org/show_bug.cgi?id=381146 - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html - http://secunia.com/advisories/27403 - http://secunia.com/advisories/27336 - http://www.debian.org/security/2007/dsa-1396 - http://secunia.com/advisories/27425 - http://secunia.com/advisories/28398 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.j
com/advisories/27425 - http://secunia.com/advisories/28398 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27325 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - http://secunia.com/advisories/27665 - http://www.redhat.com/support/errata/RHSA-2007-0979.html - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://secunia.com/advisories/27480 - http://secunia.com/advisories/27680 - http://www.securityfocus.com/bid/26132 - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search
26132 - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/threaded - http://www.ubuntu.com/usn/usn-536-1
CVE ID: CVE-2007-5338 State: PUBLISHED Published: 2007-10-21T20:00:00 Last Updated: 2024-08-07T15:24:42.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.vupen.com/english/advisories/2007/3
5.html - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.vupen.com/english/advisories/2007/3587 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml - http://www.mozilla.org/security/announce/2007/mfsa2007-35.html - http://secunia.com/advisories/27360 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://secunia.com/advisories/27315 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com
ies/27315 - http://secunia.com/advisories/27327 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/27276 - https://usn.ubuntu.com/535-1/ - http://www.debian.org/security/2007/dsa-1401 - http://www.debian.org/security/2007/dsa-1392 - http://www.redhat.com/support/errata/RHSA-2007-0980.html - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/27356 - http://www.redhat.com/support/errata/RHSA-2007-0981.html - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.