deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-5816
Published: 2007-11-05
Description: dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/39150; http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt; http://secunia.com/advisories/27440
CVE: CVE-2007-5817
Published: 2007-11-05
Description: dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action.  NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt; http://www.securityfocus.com/bid/26437; http://packetstorm.linuxsecurity.com/0710-exploits/contentcustom-disclose.txt
CVE: CVE-2007-5818
Published: 2007-11-05
Description: Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks as administrators.
CVSS Score: 7.6 (HIGH)
CWE: CWE-352
References: http://0x90.com.ar/Advisory/20071031.txt; http://secunia.com/advisories/27485; http://securityreason.com/securityalert/3341
CVE: CVE-2007-5819
Published: 2007-11-05
Description: IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://secunia.com/advisories/27473; http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264; http://www.securityfocus.com/bid/26293
CVE: CVE-2007-5820
Published: 2007-11-05
Description: Directory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://osvdb.org/39021; http://www.securityfocus.com/bid/26306; http://www.vupen.com/english/advisories/2007/3749
CVE: CVE-2007-5821
Published: 2007-11-05
Description: Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lng parameter to (a) guestbook.php, (b) admin/admin.guestbook.php, or (c) auto/glob_new.php; or (2) the lngdefault parameter to auto/ch_lng.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39064; http://osvdb.org/39065; http://osvdb.org/39066
CVE: CVE-2007-5822
Published: 2007-11-05
Description: Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/45287; http://securityreason.com/securityalert/3339; http://www.inj3ct-it.org/exploit/scribe.txt
CVE: CVE-2007-5823
Published: 2007-11-05
Description: Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the username parameter in a Register action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/39063; http://securityreason.com/securityalert/3339; http://www.inj3ct-it.org/exploit/scribe.txt
CVE: CVE-2007-5824
Published: 2007-11-05
Description: webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a stats method action to /xml-rpc with (1) an empty Authorization header line, which triggers a crash in the ws_decodepassword function; or (2) a header line without a ':' character, which triggers a crash in the ws_getheaders function.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://bugs.gentoo.org/show_bug.cgi?id=200110; http://secunia.com/advisories/28269; http://secunia.com/advisories/30661
CVE: CVE-2007-5825
Published: 2007-11-05
Description: Format string vulnerability in the ws_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to execute arbitrary code via a stats method action to /xml-rpc with format string specifiers in the (1) username or (2) password portion of base64-encoded data on the "Authorization: Basic" HTTP header line.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://bugs.gentoo.org/show_bug.cgi?id=200110; http://secunia.com/advisories/28269; http://secunia.com/advisories/30661
CVE: CVE-2007-5826
Published: 2007-11-05
Description: Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.
CVSS Score: 9.3 (HIGH)
CWE: CWE-22
References: http://osvdb.org/38415; http://secunia.com/advisories/27462; http://shinnai.altervista.org/exploits/txt/TXT_3kXDua0a0Tl5Vm5LU3ms.html
CVE: CVE-2007-5827
Published: 2007-11-05
Description: iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448873; http://osvdb.org/42037; http://secunia.com/advisories/27483
CVE: CVE-2007-5828
Published: 2007-11-05
Description: Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/.  NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CSRF protection module that is included with the product.  However, CVE considers this an issue because the default configuration does not use this module
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/45285; http://securityreason.com/securityalert/3338; http://www.securityfocus.com/archive/1/482983/100/0/threaded
CVE: CVE-2007-5829
Published: 2007-11-05
Description: The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/40864; http://secunia.com/advisories/27488; http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html
CVE: CVE-2007-5830
Published: 2007-11-05
Description: Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS) 3.1 before SP1, and Message Networking (MN) 3.1, allows remote attackers to cause a denial of service via unspecified vectors related to "input validation."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://osvdb.org/38482; http://secunia.com/advisories/27505; http://support.avaya.com/elmodocs2/security/ASA-2007-415.htm
CVE: CVE-2007-5831
Published: 2007-11-05
Description: Directory traversal vulnerability in fileSystem.do in SSL-Explorer before 0.2.14 allows remote attackers to access arbitrary files via directory traversal sequences in the path parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/36914; http://secunia.com/advisories/25512; http://sourceforge.net/forum/forum.php?forum_id=700251
CVE: CVE-2007-5832
Published: 2007-11-05
Description: Unspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote attackers to inject (1) headers or (2) body data in an HTTP transaction, a different vulnerability than CVE-2007-2907. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/45291; http://secunia.com/advisories/25512; http://sourceforge.net/forum/forum.php?forum_id=723987
CVE: CVE-2007-5833
Published: 2007-11-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via (1) user info (account details) or (2) a post.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://securityreason.com/securityalert/3343; http://www.securityfocus.com/archive/1/482732/100/0/threaded; http://securityreason.com/securityalert/3343
CVE: CVE-2007-5834
Published: 2007-11-05
Description: Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element in a news post.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39062; http://securityreason.com/securityalert/3343; http://www.securityfocus.com/archive/1/482732/100/0/threaded
CVE: CVE-2007-5835
Published: 2007-11-05
Description: Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/3343; http://www.securityfocus.com/archive/1/482732/100/0/threaded; http://securityreason.com/securityalert/3343
CVE: CVE-2007-5836
Published: 2007-11-05
Description: SQL injection vulnerability in Amazing Flash AFCommerce allows remote attackers to execute arbitrary SQL commands via the firstname parameter to an unspecified component, a different issue than CVE-2006-3794.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/26282; https://exchange.xforce.ibmcloud.com/vulnerabilities/38345; http://www.securityfocus.com/bid/26282
CVE: CVE-2007-5837
Published: 2007-11-05
Description: GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448721; http://secunia.com/advisories/27454; http://secunia.com/advisories/28671
CVE: CVE-2007-3874
Published: 2007-11-06
Description: Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=619; http://secunia.com/advisories/27412; http://www.securityfocus.com/bid/26266
CVE: CVE-2007-4997
Published: 2007-11-06
Description: Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an "off-by-two error."
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: ftp://ftp.kernel.org/pub/linux/kernel/people/bunk/linux-2.6.16.y/testing/ChangeLog-2.6.16.57-rc1; http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commitdiff%3Bh=04045f98e0457aba7d4e6736f37eed189c48a5f7; http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html
CVE: CVE-2007-5838
Published: 2007-11-06
Description: Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.
CVSS Score: 7.2 (HIGH)
CWE: CWE-16
References: http://secunia.com/advisories/27412; http://www.irmplc.com/index.php/111-Vendor-Alerts; http://www.irmplc.com/index.php/152-Advisory-022
CVE: CVE-2007-5839
Published: 2007-11-06
Description: The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449149; http://osvdb.org/42061; http://secunia.com/advisories/27463
CVE: CVE-2007-4994
Published: 2007-11-06
Description: Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://osvdb.org/40440; http://secunia.com/advisories/27557; http://www.redhat.com/support/errata/RHSA-2007-0934.html
CVE: CVE-2007-5840
Published: 2007-11-06
Description: PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter, a different vector than CVE-2006-4920.2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38406; http://secunia.com/advisories/27527; http://www.securityfocus.com/bid/26321
CVE: CVE-2007-5841
Published: 2007-11-06
Description: PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the site parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/26322; http://www.vupen.com/english/advisories/2007/3753; https://exchange.xforce.ibmcloud.com/vulnerabilities/38253
CVE: CVE-2007-5842
Published: 2007-11-06
Description: Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter to (1) admincp/auth/secure.php or (2) admincp/auth/checklogin.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38489; http://osvdb.org/38490; http://www.securityfocus.com/bid/26325
CVE: CVE-2007-5843
Published: 2007-11-06
Description: PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the pathdot parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/38480; http://www.securityfocus.com/bid/26316; http://www.vupen.com/english/advisories/2007/3751
CVE: CVE-2007-5844
Published: 2007-11-06
Description: Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the selskin parameter to index.php.  NOTE: this can be leveraged for remote file inclusion by including inc/boxleft.inc and specifying a URL in the xposbox[L][] array parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/26315; http://www.vupen.com/english/advisories/2007/3750; https://exchange.xforce.ibmcloud.com/vulnerabilities/38255
CVE: CVE-2007-5845
Published: 2007-11-06
Description: Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter.  NOTE: this can be leveraged to bypass authentication and upload arbitrary files by including admin/inc/upload.inc and specifying certain multipart/form-data input for admin/inc/upload.inc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/38492; http://retrogod.altervista.org/guppy_4516_cmd.html; https://www.exploit-db.com/exploits/3221
CVE: CVE-2007-5846
Published: 2007-11-06
Description: The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repeaters value.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=198346; http://lists.vmware.com/pipermail/security-announce/2008/000014.html; http://net-snmp.svn.sourceforge.net/viewvc/net-snmp/tags/Ext-5-4-1/net-snmp/agent/snmp_agent.c?view=log
CVE: CVE-2007-5741
Published: 2007-11-07
Description: Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/42071; http://osvdb.org/42072; http://plone.org/about/security/advisories/cve-2007-5741
CVE: CVE-2007-5887
Published: 2007-11-07
Description: SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/26334; https://exchange.xforce.ibmcloud.com/vulnerabilities/38264; https://www.exploit-db.com/exploits/4609
CVE: CVE-2007-5888
Published: 2007-11-07
Description: Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://coppermine-gallery.net/forum/index.php?topic=48106.0; http://osvdb.org/38420; http://secunia.com/advisories/27534
CVE: CVE-2007-1659
Published: 2007-11-07
Description: Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=198976; http://docs.info.apple.com/article.html?artnum=307179; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-1660
Published: 2007-11-07
Description: Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=198976; http://docs.info.apple.com/article.html?artnum=307179; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-1661
Published: 2007-11-07
Description: Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns.
CVSS Score: 6.4 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=198976; http://docs.info.apple.com/article.html?artnum=307179; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-1662
Published: 2007-11-07
Description: Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service (crash), possibly involving forward references.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=198976; http://docs.info.apple.com/article.html?artnum=307179; http://docs.info.apple.com/article.html?artnum=307562
CVE: CVE-2007-2395
Published: 2007-11-07
Description: Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to "memory corruption."
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=306896; http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html; http://osvdb.org/38550
CVE: CVE-2007-3750
Published: 2007-11-07
Description: Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted Sample Table Sample Descriptor (STSD) atoms in a movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306896; http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html; http://osvdb.org/38549
CVE: CVE-2007-3751
Published: 2007-11-07
Description: Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untrusted Java applets that gain privileges via unspecified vectors.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=306896; http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html; http://osvdb.org/38548
CVE: CVE-2007-4672
Published: 2007-11-07
Description: Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306896; http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html; http://osvdb.org/38547
CVE: CVE-2007-4675
Published: 2007-11-07
Description: Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.48bits.com/?p=176; http://docs.info.apple.com/article.html?artnum=306896; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=620
CVE: CVE-2007-4676
Published: 2007-11-07
Description: Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306896; http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html; http://osvdb.org/38546
CVE: CVE-2007-4677
Published: 2007-11-07
Description: Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=306896; http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html; http://secunia.com/advisories/27523
CVE: CVE-2007-4766
Published: 2007-11-07
Description: Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via unspecified escape (backslash) sequences.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=198976; http://docs.info.apple.com/article.html?artnum=307179; http://docs.info.apple.com/article.html?artnum=307562