Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-4640 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload and execute arbitrary PHP files in uploads/ via an Uploads action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/25491 - http://secunia.com/advisories/26598 - https://www.exploit-db.com/exploits/4341 - http://osvdb.org/38670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36357
CVE ID: CVE-2007-4641 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36358 - https://www.exploit-db.com/exploits/4341
CVE ID: CVE-2007-4642 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent function in d_net.c or the (2) Msg_Write function in net_msg.c, or (3) many commands that are not properly handled by the NetSv_ReadCommands function in d_netsv.c; or (4) cause a denial of service (daemon crash) via a chat (PKT_CHAT) message without a final '\0' character. Additional Analyst Notes: - CVE Program Co
(daemon crash) via a chat (PKT_CHAT) message without a final '\0' character. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3084 - http://secunia.com/advisories/28821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36332 - http://aluigi.altervista.org/adv/dumsdei-adv.txt - http://bugs.gentoo.org/show_bug.cgi?id=190835 - http://secunia.com/advisories/26524 - http://www.securityfocus.com/archive/1/478077/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/36333 - http://www.securityfocus.com/bid/25483 - http://security.gentoo.org/glsa/glsa-200802-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/363
id/25483 - http://security.gentoo.org/glsa/glsa-200802-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/36334 - http://aluigi.org/poc/dumsdei.zip
CVE ID: CVE-2007-4643 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a PKT_CHAT packet with a data length less than 3, which triggers an erroneous malloc, possibly related to the Sv_HandlePacket function in sv_main.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36338 - http://securityreason.com/securityalert/3084 - http://secunia.com/advisories/28821 - http://bugs.gentoo.org/show_bug.c
- http://securityreason.com/securityalert/3084 - http://secunia.com/advisories/28821 - http://bugs.gentoo.org/show_bug.cgi?id=190835 - http://secunia.com/advisories/26524 - http://www.securityfocus.com/archive/1/478077/100/0/threaded - http://www.securityfocus.com/bid/25483 - http://security.gentoo.org/glsa/glsa-200802-02.xml - http://aluigi.org/poc/dumsdei.zip
CVE ID: CVE-2007-4644 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the Cl_GetPackets function in cl_main.c in the client in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSV_CONSOLE_TEXT message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3084 - http://secunia.com/advisories/28821 - http://bugs.gentoo.org/show_bug.cgi?id=190835 - http://secunia.com/advisories/26524 - http://www.securityfocus.com/archive/1/478077
.gentoo.org/show_bug.cgi?id=190835 - http://secunia.com/advisories/26524 - http://www.securityfocus.com/archive/1/478077/100/0/threaded - http://www.securityfocus.com/bid/25483 - http://security.gentoo.org/glsa/glsa-200802-02.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/36337 - http://aluigi.org/poc/dumsdei.zip
CVE ID: CVE-2007-4645 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a newspost do action, a different vulnerability than CVE-2006-1108. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26652 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36347 - http://www.securityfocus.com/bid/25488 - http://osvdb.org/36688 - http://www.vupen.com/english/advisories/2007/3014 - https://www.exploit-db.com/exploits/4342
CVE ID: CVE-2007-4646 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018637 - http://secunia.com/advisories/26666 - http://www.securityfocus.com/bid/25496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36369 - http://www.vupen.com/english/advisories/2007/3044 - https://www.exploit-db.com/explo
bmcloud.com/vulnerabilities/36369 - http://www.vupen.com/english/advisories/2007/3044 - https://www.exploit-db.com/exploits/4344
CVE ID: CVE-2007-4647 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36841 - http://secunia.com/advisories/26650 - http://www.securityfocus.com/bid/25487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36350 - https://www.exploit-db.com/exploits/4343
CVE ID: CVE-2007-4648 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:09.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows local users to gain privileges by (1) triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by (2) sending a crafted KEVENT structure through ioctl 0xBF672028 to overwrite arbitrary memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/478224/100/0/threaded - http://www.securitytracke
rogram Container: References: - http://www.securityfocus.com/archive/1/478224/100/0/threaded - http://www.securitytracker.com/id?1018636 - http://www.securityfocus.com/bid/25499 - http://securityreason.com/securityalert/3087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36373 - http://www.48bits.com/exploits/nvc.rar
CVE ID: CVE-2007-4649 State: PUBLISHED Published: 2007-08-31T23:00:00 Last Updated: 2024-08-07T15:01:10.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/3085 - http://www.securityfocus.com/bid/25493 - http://secunia.com/advisories/26581 - http://lists.grok.org.uk/pipermail/full-disclosure/
.securityfocus.com/bid/25493 - http://secunia.com/advisories/26581 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065509.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36367
CVE ID: CVE-2007-4650 State: PUBLISHED Published: 2007-09-04T17:00:00 Last Updated: 2024-08-07T15:01:09.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200711-03.xml - http://secunia.com/advisories/26719 - http://osvdb.org/41657 - http://www.vupen.com/english/advisories/2007/30
-03.xml - http://secunia.com/advisories/26719 - http://osvdb.org/41657 - http://www.vupen.com/english/advisories/2007/3072 - http://www.debian.org/security/2007/dsa-1404 - http://osvdb.org/41658 - http://secunia.com/advisories/27594 - https://bugzilla.redhat.com/show_bug.cgi?id=267421 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00097.html - http://www.securityfocus.com/bid/25580 - http://gallery.menalto.com/gallery_2.2.3_released - http://secunia.com/advisories/26716 - http://secunia.com/advisories/27502 - http://bugs.gentoo.org/show_bug.cgi?id=191587
CVE ID: CVE-2007-4651 State: PUBLISHED Published: 2007-09-12T01:00:00 Last Updated: 2024-08-07T15:01:09.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe Connect Enterprise Server 6 allows remote attackers to read certain pages that are restricted to the administrator via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26770 - http://www.securitytracker.com/id?1018682 - http://www.securityfocus.com/bid/25640 - http://www.vupen.com/english/advisories/2007/3131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36573 - http://osvdb.org/38055 - http://www.adobe.com/support/securi
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/36573 - http://osvdb.org/38055 - http://www.adobe.com/support/security/bulletins/apsb07-14.html
CVE ID: CVE-2007-4652 State: PUBLISHED Published: 2007-09-04T19:00:00 Last Updated: 2024-08-07T15:01:09.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36387 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php.net/ChangeLog-5.php#5.2.4 - http://www.trustix.org/errata/2007/0026/ - https://issues.rpath.com/browse/RPL-1693 - https://issues.rpath.com/browse/RPL-170
//www.trustix.org/errata/2007/0026/ - https://issues.rpath.com/browse/RPL-1693 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4653 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4346 - http://www.securityfocus.com/bid/25501 - http://osvdb.org/38427
CVE ID: CVE-2007-4654 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:10.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144), possibly a related issue to CVE-2002-1024. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/45873 - http://securityreason.com/securityalert/3091
yst Notes: - CVE Program Container: References: - http://osvdb.org/45873 - http://securityreason.com/securityalert/3091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44542 - http://www.securityfocus.com/archive/1/478165/100/0/threaded
CVE ID: CVE-2007-4655 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803 - http://osvdb.org/40147 - http://jvn.jp/jp/JVN%2320452446/index.html - https://exchange.xforce.ibmcloud.com/vul
3212803 - http://osvdb.org/40147 - http://jvn.jp/jp/JVN%2320452446/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/36389 - http://osvdb.org/40146 - http://secunia.com/advisories/26614 - http://www.securityfocus.com/bid/25500
CVE ID: CVE-2007-4656 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26657 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392 - http://www.securityfocus.com/bid/25503 - http://www2.backup-
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392 - http://www.securityfocus.com/bid/25503 - http://www2.backup-manager.org/Release063 - http://secunia.com/advisories/29377 - http://www.securitytracker.com/id?1018639 - http://www.debian.org/security/2008/dsa-1518 - http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173 - http://osvdb.org/37444
CVE ID: CVE-2007-4657 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:10.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory contents) or cause a denial of service (thread crash) via a large len value to the (1) strspn or (2) strcspn function, which triggers an out-of-bounds read. NOTE: this affects different product versions than CVE-2007-3996. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36388 - http://s
eferences: - http://secunia.com/advisories/30288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36388 - http://secunia.com/advisories/26822 - https://launchpad.net/bugs/173043 - http://www.vupen.com/english/advisories/2008/0059 - http://www.debian.org/security/2008/dsa-1444 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - http://www.php.net/releases/4_4_8.php - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/28936 - http://www.trustix.org/errata/2007/0026/ - https://usn.ubuntu.com/549-1/ - https://issues.rpath.c
com/advisories/28936 - http://www.trustix.org/errata/2007/0026/ - https://usn.ubuntu.com/549-1/ - https://issues.rpath.com/browse/RPL-1693 - http://secweb.se/en/advisories/php-strcspn-information-leak-vulnerability/ - http://secunia.com/advisories/28249 - http://www.debian.org/security/2008/dsa-1578 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://www.php.net/ChangeLog-4.php - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/39399 - http://secunia.com/advisories/28318 - http://www.u
_4.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/39399 - http://secunia.com/advisories/28318 - http://www.ubuntu.com/usn/usn-549-2 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4658 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/36377 - https://launchpad.net/bugs/173043 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://www.vupen.com/english/advisories/200
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://www.vupen.com/english/advisories/2008/0059 - http://secunia.com/advisories/28658 - https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html - http://secunia.com/advisories/26967 - http://www.debian.org/security/2008/dsa-1444 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10363 - http://www.php.net/releases/4_4_8.php - http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 - http://www.php.net/ChangeLog-
lackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 - http://www.php.net/ChangeLog-5.php#5.2.4 - http://secunia.com/advisories/28936 - http://secunia.com/advisories/26930 - http://www.trustix.org/errata/2007/0026/ - http://rhn.redhat.com/errata/RHSA-2007-0889.html - https://usn.ubuntu.com/549-1/ - https://issues.rpath.com/browse/RPL-1693 - http://secunia.com/advisories/28249 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/27545 - http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187
advisories/26838 - http://secunia.com/advisories/27377 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 - http://www.php.net/ChangeLog-4.php - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/26895 - http://www.ubuntu.com/usn/usn-549-2 - http://www.redhat.com/support/errata/RHSA-2007-0890.html - http://www.redhat.com/support/errata/RHSA-2007-0891.html - http://secunia.com/advisories/26871 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4659 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memory_limit violation, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/36380 - http://secunia.com/advisories/26822 - http://www.debian.org/security/2008/dsa-1444 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php.net/ChangeLog-5.php#5.2.4 - http://www.tru
- http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://www.php.net/ChangeLog-5.php#5.2.4 - http://www.trustix.org/errata/2007/0026/ - https://issues.rpath.com/browse/RPL-1693 - http://secunia.com/advisories/28249 - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27377 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4660 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/173043 - http://www.debian.org/security/2008/dsa-1444 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - http://www.php.net/ChangeLog-5.php#5.2.4 - https://usn.ubuntu.com/549-1/ - http://secunia.com/advisories/28249 - http://www.mandriv
php.net/ChangeLog-5.php#5.2.4 - https://usn.ubuntu.com/549-1/ - http://secunia.com/advisories/28249 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:125 - http://secunia.com/advisories/27102 - http://www.vupen.com/english/advisories/2007/3023 - http://www.php.net/releases/5_2_4.php - http://www.ubuntu.com/usn/usn-549-2 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:126 - http://secunia.com/advisories/26642
CVE ID: CVE-2007-4661 State: PUBLISHED Published: 2007-09-04T22:00:00 Last Updated: 2024-08-07T15:01:09.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/173043 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secun
://launchpad.net/bugs/173043 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml - http://secunia.com/advisories/27864 - http://www.php.net/ChangeLog-5.php#5.2.4 - https://usn.ubuntu.com/549-1/ - https://issues.rpath.com/browse/RPL-1702 - http://secunia.com/advisories/26838 - http://secunia.com/advisories/27102 - http://www.php.net/releases/5_2_4.php - http://www.ubuntu.com/usn/usn-549-2 - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.58&r2=1.445.2.14.2.59 - http://secunia.com/advisories/26642