deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5171
Published: 2007-10-01
Description: Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://forums.quicksilverforums.com/index.php?a=topic&t=1332; http://secunia.com/advisories/26998; http://www.securityfocus.com/bid/25887
CVE: CVE-2007-5172
Published: 2007-10-01
Description: Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://forums.quicksilverforums.com/index.php?a=topic&t=1332; http://secunia.com/advisories/26998; http://www.securityfocus.com/bid/25887
CVE: CVE-2007-5173
Published: 2007-10-03
Description: PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37419; http://secunia.com/advisories/27001; http://www.securityfocus.com/archive/1/481215/100/0/threaded
CVE: CVE-2007-5174
Published: 2007-10-03
Description: Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the do parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://actsite.de/index.php/sicherheitsupdate.html; http://osvdb.org/37401; http://secunia.com/advisories/26999
CVE: CVE-2007-5175
Published: 2007-10-03
Description: PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL in the BaseCfg[BaseDir] parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/25868; http://www.vupen.com/english/advisories/2007/3318; https://exchange.xforce.ibmcloud.com/vulnerabilities/36868
CVE: CVE-2007-5176
Published: 2007-10-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) NA_DISPLAYNAME parameter in helpdesk/user/rf_create.jsp and the (2) username and (3) LDAPError parameters in index2.jsp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37535; http://osvdb.org/37536; http://secunia.com/advisories/26892
CVE: CVE-2007-5177
Published: 2007-10-03
Description: SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38590; http://www.securityfocus.com/bid/25865; https://exchange.xforce.ibmcloud.com/vulnerabilities/36875
CVE: CVE-2007-5178
Published: 2007-10-03
Description: contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter.  NOTE: some sources incorrectly state that phpbb_root_path is the affected parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37400; http://secunia.com/advisories/27011; http://www.attrition.org/pipermail/vim/2007-October/001807.html
CVE: CVE-2007-5179
Published: 2007-10-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the (1) ad, (2) sehir, (3) yas, (4) cins, (5) tel, (6) mail, and (7) mesaj parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27034; http://www.securityfocus.com/bid/25874; http://secunia.com/advisories/27034
CVE: CVE-2007-5180
Published: 2007-10-03
Description: Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori parameter in satilik.asp and the (2) Emlak parameter in detay.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37407; http://osvdb.org/37408; http://packetstormsecurity.org/0709-exploits/ohesa-sql.txt
CVE: CVE-2007-5181
Published: 2007-10-03
Description: SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilan_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37405; http://packetstormsecurity.org/0709-exploits/netkamp-sql.txt; http://secunia.com/advisories/27032
CVE: CVE-2007-5182
Published: 2007-10-03
Description: Cross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML via the (1) Email parameter, and possibly the (2) Ad, (3) Soyad, (4) Konu, and (5) Mesaj parameters to iletisim.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37406; http://packetstormsecurity.org/0709-exploits/netkamp-sql.txt; http://secunia.com/advisories/27032
CVE: CVE-2007-5183
Published: 2007-10-03
Description: Cross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows remote attackers to inject arbitrary web script or HTML via the idkey parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37418; http://pridels-team.blogspot.com/2007/10/odysseysuite-internet-banking-vuln.html; http://secunia.com/advisories/27022
CVE: CVE-2007-5184
Published: 2007-10-03
Description: Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://debork.se/poc/001_smbftpd.c; http://osvdb.org/41385; http://secunia.com/advisories/27014
CVE: CVE-2007-5185
Published: 2007-10-03
Description: Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTML_MENU_DirPath parameter to (1) config_HTML_MENU.php and (2) config_PHPLM.php in phpwcms_template/inc_script/frontend_render/navigation/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38591; http://osvdb.org/38592; http://www.securityfocus.com/bid/25879
CVE: CVE-2007-5186
Published: 2007-10-03
Description: PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497.  NOTE: this issue was disputed, but the dispute was retracted after additional analysis.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/27025; http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=543854; http://www.attrition.org/pipermail/vim/2007-October/001811.html
CVE: CVE-2007-5187
Published: 2007-10-03
Description: SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38593; http://www.securityfocus.com/bid/25876; http://www.vupen.com/english/advisories/2007/3331
CVE: CVE-2007-5188
Published: 2007-10-03
Description: Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files via unspecified vectors related to improper upload configuration settings in class/uploader.php and class/mimetypes.inc.php, possibly an incomplete blacklist that omits the .php4 extension.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/41386; http://secunia.com/advisories/27006; http://sourceforge.net/project/shownotes.php?group_id=41586&release_id=543338
CVE: CVE-2007-5189
Published: 2007-10-03
Description: Multiple SQL injection vulnerabilities in mes_add.php in x-script GuestBook 1.3a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) icq, and (4) website parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3186; http://www.securityfocus.com/archive/1/481209/100/0/threaded; http://www.securityfocus.com/bid/25890
CVE: CVE-2007-5191
Published: 2007-10-04
Description: mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
CVSS Score: 7.2 (HIGH)
CWE: CWE-252
References: http://bugs.gentoo.org/show_bug.cgi?id=195390; http://frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198; http://git.kernel.org/?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b[PII_REDACTED]837a271e80b187e
CVE: CVE-2007-5193
Published: 2007-10-04
Description: The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982; http://osvdb.org/42338; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444982
CVE: CVE-2007-5194
Published: 2007-10-04
Description: The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/27030; http://www.securityfocus.com/archive/1/481395/100/0/threaded; http://www.securityfocus.com/bid/25899
CVE: CVE-2007-5198
Published: 2007-10-04
Description: Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=194178; http://secunia.com/advisories/27124; http://secunia.com/advisories/27362
CVE: CVE-2007-5201
Published: 2007-10-04
Description: The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=442840; http://duplicity.nongnu.org/CHANGELOG; http://osvdb.org/42339
CVE: CVE-2007-5207
Published: 2007-10-04
Description: guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=445308; http://osvdb.org/41534; http://secunia.com/advisories/27076
CVE: CVE-2007-4133
Published: 2007-10-04
Description: The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which allows local users to cause a denial of service (panic) via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
References: http://secunia.com/advisories/26994; http://secunia.com/advisories/27322; http://secunia.com/advisories/28170
CVE: CVE-2007-4673
Published: 2007-10-04
Description: Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file.  NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.
CVSS Score: 9.3 (HIGH)
CWE: CWE-78
References: http://docs.info.apple.com/article.html?artnum=306560; http://lists.apple.com/archives/Security-announce/2007/Oct/msg00000.html; http://osvdb.org/40434
CVE: CVE-2007-5209
Published: 2007-10-04
Description: Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary code via a long HTTP request to TCP port 6061.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/41391; http://secunia.com/advisories/26951; http://www.securityfocus.com/bid/25902
CVE: CVE-2007-5210
Published: 2007-10-04
Description: Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restrictions and read or write unspecified data via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/27003; http://www.securityfocus.com/bid/25907; https://exchange.xforce.ibmcloud.com/vulnerabilities/36924
CVE: CVE-2007-5211
Published: 2007-10-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27003; http://www.securityfocus.com/bid/25910; https://exchange.xforce.ibmcloud.com/vulnerabilities/36926
CVE: CVE-2007-5212
Published: 2007-10-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml.  NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38795; http://osvdb.org/38796; http://securityreason.com/securityalert/3188
CVE: CVE-2007-5213
Published: 2007-10-04
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
CVSS Score: 9.3 (HIGH)
CWE: CWE-352
References: http://osvdb.org/39490; http://osvdb.org/39491; http://securityreason.com/securityalert/3188
CVE: CVE-2007-5214
Published: 2007-10-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to the default URI associated with a directory, as demonstrated by (a) the root directory and (b) the view/ directory; (2) parameters associated with saved settings, as demonstrated by (c) the conf_Network_HostName parameter on the Network page and (d) the conf_Layout_OwnTitle parameter to ServerManager.srv; and (3) the query string to ServerManager.srv, which is displayed on the logs page. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39492; http://osvdb.org/39493; http://osvdb.org/39494
CVE: CVE-2007-5215
Published: 2007-10-04
Description: Multiple PHP remote file inclusion vulnerabilities in Jacob Hinkle GodSend 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the SCRIPT_DIR parameter to (1) gtk/main.inc.php or (2) cmdline.inc.php.  NOTE: vector 2 is disputed by CVE because it is contained in unaccessible code, requiring that two undefined constants be equal.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/13/rfi-02-godsend/; http://osvdb.org/38551; http://osvdb.org/38552
CVE: CVE-2007-5216
Published: 2007-10-04
Description: Multiple PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the cfg_vcard_path parameter to src/vcard_inc.php or (2) the cfg_phpmailer_path parameter to src/email_inc.php.  NOTE: the ark_inc.php vector is already covered by CVE-2006-6086.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/13/rfi-02-eark/; http://osvdb.org/38553; http://osvdb.org/38554
CVE: CVE-2007-5078
Published: 2007-10-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in eGov Manager allow remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied input" to (1) center.exe or (2) Index.exe.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/38507; http://osvdb.org/38508; http://securityreason.com/securityalert/3192
CVE: CVE-2007-5217
Published: 2007-10-05
Description: Stack-based buffer overflow in the ADM4 ActiveX control in adm4.dll in Altnet Download Manager 4.0.0.6, as used in (1) Kazaa 3.2.7 and (2) Grokster, allows remote attackers to execute arbitrary code via a long argument to the Install method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/37785; http://osvdb.org/38435; http://secunia.com/advisories/26970
CVE: CVE-2007-5218
Published: 2007-10-05
Description: Cross-site scripting (XSS) vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/37426; http://secunia.com/advisories/27065; http://securityreason.com/securityalert/3190
CVE: CVE-2007-5219
Published: 2007-10-05
Description: Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/37725; http://secunia.com/advisories/27039; http://www.securityfocus.com/bid/25888
CVE: CVE-2007-5220
Published: 2007-10-05
Description: SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38555; http://securityreason.com/securityalert/3189; http://www.securityfocus.com/archive/1/481211/100/0/threaded
CVE: CVE-2007-5221
Published: 2007-10-05
Description: PHP remote file inclusion vulnerability in mail/childwindow.inc.php in Poppawid 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the form parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37422; http://secunia.com/advisories/27050; http://www.securityfocus.com/bid/25897
CVE: CVE-2007-5222
Published: 2007-10-05
Description: SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQL commands via a "Firefox ID=" substring in a Referer HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/38556; http://www.maxdev.com/Article641.phtml; http://www.securityfocus.com/bid/25864
CVE: CVE-2007-5223
Published: 2007-10-05
Description: Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving (1) admin/backupstart.php, (2) a .sql filename under admin/admin/dump/, (3) a .sql filename in the fl parameter to admin/downloadbackup.php, and (4) a .. (dot dot) in the fl parameter to admin/downloadbackup.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/42342; http://osvdb.org/42343; http://osvdb.org/42344
CVE: CVE-2007-5224
Published: 2007-10-05
Description: inc/exif.inc.php in Original Photo Gallery 0.11.2 and earlier allows remote attackers to execute arbitrary programs via the exif_prog parameter, which is specified in an exec function call.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/41390; http://secunia.com/advisories/27029; http://securityreason.com/securityalert/3187
CVE: CVE-2007-5225
Published: 2007-10-05
Description: Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative maximum length value to the I_PEEK ioctl.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=603; http://secunia.com/advisories/27024; http://secunia.com/advisories/27654
CVE: CVE-2007-0447
Published: 2007-10-05
Description: Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/36118; http://secunia.com/advisories/26053; http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html
CVE: CVE-2007-3699
Published: 2007-10-05
Description: The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/36119; http://secunia.com/advisories/26053; http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html
CVE: CVE-2007-4568
Published: 2007-10-05
Description: Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119, CWE-189
References: http://bugs.freedesktop.org/show_bug.cgi?id=12298; http://bugs.gentoo.org/show_bug.cgi?id=194606; http://docs.info.apple.com/article.html?artnum=307430
CVE: CVE-2007-4989
Published: 2007-10-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-4568.  Reason: This candidate is a reservation duplicate of CVE-2007-4568.  Notes: All CVE users should reference CVE-2007-4568 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-4990
Published: 2007-10-05
Description: The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://bugs.freedesktop.org/show_bug.cgi?id=12299; http://bugs.gentoo.org/show_bug.cgi?id=194606; http://docs.info.apple.com/article.html?artnum=307562