Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495445/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.vupen.com/english/advisories/2008/2288 - http://secunia.com/advisories/32793 - http://www.securityfocus.com/bid/30491 - http://svn.python.org/view?rev=60793&view=rev - http://secunia.com/advisories/37471 - http://secunia.com/advisories/31687 - http://www.pyth
rg/view?rev=60793&view=rev - http://secunia.com/advisories/37471 - http://secunia.com/advisories/31687 - http://www.python.org/download/releases/2.5.2/NEWS.txt - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://security.gentoo.org/glsa/glsa-200807-16.xml - http://secunia.com/advisories/31332 - http://www.ubuntu.com/usn/usn-632-1 - http://bugs.gentoo.org/show_bug.cgi?id=232137 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://secunia.com/advisories/31518 - http://www.python.org/download/releases/2.6/NEWS.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.o
.python.org/download/releases/2.6/NEWS.txt - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7720 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8996 - http://secunia.com/advisories/31365 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 - http://secunia.com/advisories/31473 - http://wiki.rpath.com/Advisories:rPSA-2008-0243 - http://www.debian.org/security/2008/dsa-1667 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 - http://www.vupen.com/english/advisories/2009/3316
CVE ID: CVE-2008-3144 State: PUBLISHED Published: 2008-08-01T14:00:00 Last Updated: 2024-08-07T09:28:41.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495445/100/0/threaded - http://list
Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/495445/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.vupen.com/english/advisories/2008/2288 - http://secunia.com/advisories/32793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 - http://www.securityfocus.com/bid/30491 - http://secunia.com/advisories/33937 - http://secunia.com/advisories/37471 - http://bugs.python.org/issue2589 - http://secunia.com/advisories/31687 - http://www.vmware.com/security/advisories/VMSA-2009-0016.html - http://security.gentoo.org/glsa/glsa-200807-16.xml - http://support.apple.com/kb/HT3438 - http://lists.apple.
016.html - http://security.gentoo.org/glsa/glsa-200807-16.xml - http://support.apple.com/kb/HT3438 - http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html - http://secunia.com/advisories/31358 - http://secunia.com/advisories/31332 - http://www.ubuntu.com/usn/usn-632-1 - http://bugs.gentoo.org/show_bug.cgi?id=232137 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 - http://svn.python.org/view?rev=63734&view=rev - http://www.securityfocus.com/archive/1/507985/100/0/threaded - http://bugs.python.org/issue2588 - http://secunia.com/advisories/31518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44171 - http://secunia.com/advisories/31305 - http://secuni
31518 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44171 - http://secunia.com/advisories/31305 - http://secunia.com/advisories/31365 - http://svn.python.org/view?rev=63728&view=rev - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7725 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 - http://secunia.com/advisories/31473 - http://wiki.rpath.com/Advisories:rPSA-2008-0243 - http://www.debian.org/security/2008/dsa-1667 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 - http://svn.python.org/view?rev=63883&view=rev - http://slackware.com/security/viewer.php?l=sla
ies?name=MDVSA-2008:163 - http://svn.python.org/view?rev=63883&view=rev - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 - http://www.vupen.com/english/advisories/2009/3316 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10170
CVE ID: CVE-2008-3145 State: PUBLISHED Published: 2008-07-16T18:00:00 Last Updated: 2024-08-07T09:28:41.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://www.wireshark.org/security/wnpa-sec-2008-04.html - http://www.securityfocus.com/bid/30181 - https://bugs.wireshark.org
//www.wireshark.org/security/wnpa-sec-2008-04.html - http://www.securityfocus.com/bid/30181 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2470 - http://www.securityfocus.com/archive/1/494859/100/0/threaded - https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00544.html - http://www.redhat.com/support/errata/RHSA-2008-0890.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9020 - https://issues.rpath.com/browse/RPL-2684 - http://secunia.com/advisories/31687 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0237 - http://www.vupen.com/english/advisories/2008/2057/references - http://security.gentoo.org/glsa/glsa-200808-04.xml
0237 - http://www.vupen.com/english/advisories/2008/2057/references - http://security.gentoo.org/glsa/glsa-200808-04.xml - http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43719 - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2008:152 - http://secunia.com/advisories/32091 - http://secunia.com/advisories/31044 - http://www.vupen.com/english/advisories/2008/2773 - http://secunia.com/advisories/32944 - http://secunia.com/advisories/31257 - http://secunia.com/advisories/31378 - http://www.debian.org/security/2008/dsa-1673 - https://bugzilla.redhat.com
31257 - http://secunia.com/advisories/31378 - http://www.debian.org/security/2008/dsa-1673 - https://bugzilla.redhat.com/show_bug.cgi?id=454984 - http://secunia.com/advisories/31085 - http://securitytracker.com/id?1020471
CVE ID: CVE-2008-3146 State: PUBLISHED Published: 2008-09-02T14:00:00 Last Updated: 2024-08-07T09:28:41.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted NCP packet that causes an invalid pointer to be used. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html - http://www.redhat.com/support/err
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00713.html - http://www.redhat.com/support/errata/RHSA-2008-0890.html - http://secunia.com/advisories/31864 - http://www.wireshark.org/security/wnpa-sec-2008-05.html - http://secunia.com/advisories/31687 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0278 - http://www.securityfocus.com/archive/1/496487/100/0/threaded - http://support.avaya.com/elmodocs2/security/ASA-2008-392.htm - http://secunia.com/advisories/32091 - http://www.vupen.com/english/advisories/2008/2773 - http://www.securitytracker.com/id?1020819 - http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675 - https://www.redhat.com/archives/fedora-package-
m/id?1020819 - http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2675 - https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00715.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10624 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:199 - http://security.gentoo.org/glsa/glsa-200809-17.xml - http://secunia.com/advisories/31886 - http://secunia.com/advisories/32028
CVE ID: CVE-2008-3147 State: PUBLISHED Published: 2008-07-11T18:00:00 Last Updated: 2024-08-07T09:28:41.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%\WeFi\Users\, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30966 - http://www.securityfocus.com/archive/1/493946/100/0/threaded - https://exch
ces: - http://secunia.com/advisories/30966 - http://www.securityfocus.com/archive/1/493946/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/43621 - http://osvdb.org/51543 - http://securityreason.com/securityalert/3987 - http://www.securityfocus.com/archive/1/494026/100/0/threaded - http://www.securityfocus.com/bid/30088
CVE ID: CVE-2008-3148 State: PUBLISHED Published: 2008-07-11T18:00:00 Last Updated: 2024-08-07T09:28:41.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted attackers to execute arbitrary code via a crafted DLL file that contains a long string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43675 - https://www.exploit-db.com/exploits/6031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43673 - http://www.securityfocus.com/bid/30139
CVE ID: CVE-2008-3149 State: PUBLISHED Published: 2008-07-11T18:00:00 Last Updated: 2024-08-07T09:28:41.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service (daemon crash) by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43670 - http://secunia.com/advisories/30965 - http://www.securityfocus.com/bid/30090 - http://www.securityfocus.com/archive/1/493950/100/0/threaded
CVE ID: CVE-2008-3150 State: PUBLISHED Published: 2008-07-11T18:00:00 Last Updated: 2024-08-07T09:28:41.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43616 - http://secunia.com/advisories/30950 - htt
er: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43616 - http://secunia.com/advisories/30950 - http://www.securityfocus.com/bid/30123 - https://www.exploit-db.com/exploits/6018
CVE ID: CVE-2008-3151 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43626 - http://www.securityfocus.com/archive/1/494013/100/0/threaded - http://securityreason.com/securityalert/3986 - http://secunia.com/advisories/30976
CVE ID: CVE-2008-3152 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary SQL commands via the idDirectory parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2013/references - https://www.exploit-db.com/exploits/6019 - https://www.exploit-db.com/exploits/6014 - http://www.securityfocus.com/bid/30111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43597
CVE ID: CVE-2008-3153 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43617 - http://www.vupen.com/english/advisories/2008/2014/references - http://secunia.com/advisories/30969 - https://www.exploit-db.com/exploits/6017 - http://www.securityfocus.com/bid/30122
CVE ID: CVE-2008-3154 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30074 - https://www.exploit-db.com/exploits/5997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43595
CVE ID: CVE-2008-3155 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the Update method. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43588 - http://www.vupen.com/english/advisories/2008/2008/references - http://www.securityfocus.com/bid/30086 - https://www.exploit-db.com/exploits/6004 - http://lists.grok.org.uk/pipe
nces - http://www.securityfocus.com/bid/30086 - https://www.exploit-db.com/exploits/6004 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html - http://secunia.com/advisories/30841 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html - http://www.securitytracker.com/id?1020432 - http://karol.wiesek.pl/files/panda.tgz
CVE ID: CVE-2008-3156 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download and execute arbitrary cabinet (CAB) files via unspecified URLs passed to the Update method. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/2008/references - http://www.securityfocus.com/bid/30086 - https://www.exploit-db.com/exploits/6004 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html - http://secunia.com/advisories/30841
s/6004 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063061.html - http://secunia.com/advisories/30841 - http://lists.grok.org.uk/pipermail/full-disclosure/2008-July/063068.html - http://www.securitytracker.com/id?1020432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43587 - http://karol.wiesek.pl/files/panda.tgz
CVE ID: CVE-2008-3157 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows attackers to cause a denial of service (resource consumption) via a large number of sessions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30854 - http://www.securitytracker.com/id?1020371 - http://www.vupen.com/english/advisories/2008/1942/references - https://exchange.xforce.ibmcloud.com/vulnerabilities/43364 - http://www.voipshield.com/research-details.php?i
ferences - https://exchange.xforce.ibmcloud.com/vulnerabilities/43364 - http://www.voipshield.com/research-details.php?id=61 - http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738961
CVE ID: CVE-2008-3158 State: PUBLISHED Published: 2008-07-11T22:00:00 Last Updated: 2024-08-07T09:28:41.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL requests that overwrite arbitrary memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1020385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43460 - http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5028543.html - http://www.vupen.com/english/advisories/2008/1968/references - http://www.securityfocus.com/
ilder/readme_5028543.html - http://www.vupen.com/english/advisories/2008/1968/references - http://www.securityfocus.com/bid/30001 - http://secunia.com/advisories/30904
CVE ID: CVE-2008-3159 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T09:28:41.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers to execute arbitrary code via unspecified vectors that trigger a stack-based buffer overflow, related to "flawed arithmetic." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1020431 - http://www.securityfocus.com/bid/30085 - http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858 - https://exchange.
/30085 - http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3694858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43589 - http://www.zerodayinitiative.com/advisories/ZDI-08-041/ - http://www.vupen.com/english/advisories/2008/1999 - http://secunia.com/advisories/30938
CVE ID: CVE-2008-3160 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T09:28:41.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage N series Gateway, have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/43700 - http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002373 - http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43699 - http://secunia.com
t/docview.wss?rs=1147&uid=ssg1S7002385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43699 - http://secunia.com/advisories/30931 - http://www-1.ibm.com/support/docview.wss?rs=1147&uid=ssg1S7002386 - http://www.securityfocus.com/bid/30160 - http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002385&aid=1 - http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002386&aid=1 - http://www.securitytracker.com/id?1020463 - http://www-1.ibm.com/support/docview.wss?uid=ssg1S7002372 - http://www.vupen.com/english/advisories/2008/2054
CVE ID: CVE-2008-3161 State: PUBLISHED Published: 2008-07-14T18:00:00 Last Updated: 2024-08-07T09:28:41.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Accept, (2) Accept-Language, (3) UA-CPU, (4) Accept-Encoding, (5) User-Agent, or (6) Cookie HTTP header. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30180 - https://exchange.xforce
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43730
CVE ID: CVE-2008-3162 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30154 - http://www.ubuntu.com/usn/usn-630-1 - http://www.debian.org/security/2009/dsa-1781 - http://www.openwall.com/lists/oss-security/2008/07/09/9 - http://secu
1 - http://www.debian.org/security/2009/dsa-1781 - http://www.openwall.com/lists/oss-security/2008/07/09/9 - http://secunia.com/advisories/31268 - http://secunia.com/advisories/30994 - http://www.vupen.com/english/advisories/2008/2031/references - http://secunia.com/advisories/34905 - http://www.openwall.com/lists/oss-security/2008/07/16/4 - https://roundup.mplayerhq.hu/roundup/ffmpeg/issue311 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489965 - http://secunia.com/advisories/34385 - http://security.gentoo.org/glsa/glsa-200903-33.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:157 - http://svn.mplayerhq.hu/ffmpeg?view=rev&revision=13993
CVE ID: CVE-2008-3163 State: PUBLISHED Published: 2008-07-14T23:00:00 Last Updated: 2024-08-07T09:28:41.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dodosmail_header_file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/30112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43625