deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-2799
Published: 2007-05-23
Description: Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement.  NOTE: this issue is due to an incorrect patch for CVE-2007-1536.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc; http://docs.info.apple.com/article.html?artnum=307562; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
CVE: CVE-2006-7205
Published: 2007-05-24
Description: The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memory consumption) via a large num value.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1015979; http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-04-02; http://www.osvdb.org/24945
CVE: CVE-2007-2687
Published: 2007-05-24
Description: Stack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/36580; http://secunia.com/advisories/25136; http://secunia.com/secunia_research/2007-54/advisory/
CVE: CVE-2007-2829
Published: 2007-05-24
Description: The 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system hang) via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://madwifi.org/ticket/1335; http://madwifi.org/wiki/Security; http://osvdb.org/36635
CVE: CVE-2007-2830
Published: 2007-05-24
Description: The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error.
CVSS Score: 5.0 (MEDIUM)
References: http://madwifi.org/ticket/1270; http://madwifi.org/wiki/Security; http://osvdb.org/36636
CVE: CVE-2007-2831
Published: 2007-05-24
Description: Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system crash), possibly obtain kernel memory contents, and possibly execute arbitrary code via a large negative array index value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://madwifi.org/ticket/1334; http://madwifi.org/wiki/Security; http://osvdb.org/36637
CVE: CVE-2007-2832
Published: 2007-05-24
Description: Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]7006&w=2; http://secunia.com/advisories/25377; http://www.cisco.com/en/US/products/products_security_response09186a[PII_REDACTED].html
CVE: CVE-2007-0448
Published: 2007-05-24
Description: The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files via a file path specified with an invalid URI, as demonstrated via the srpath URI.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/achievement_securityalert/44; http://securityreason.com/securityalert/2175; http://www.securityfocus.com/bid/22261
CVE: CVE-2007-2843
Published: 2007-05-24
Description: Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/38859; http://www.businessinfo.co.uk/labs/googlesnoop/snoop.html; http://www.securityfocus.com/bid/24121
CVE: CVE-2007-2844
Published: 2007-05-24
Description: PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.
CVSS Score: 9.3 (HIGH)
References: http://blog.php-security.org/archives/82-Suhosin-0.9.20-and-crypt-Thread-Safety-Vulnerability.html; http://osvdb.org/36088; http://secunia.com/advisories/25434
CVE: CVE-2007-2845
Published: 2007-05-24
Description: Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9384&w=2; http://osvdb.org/36523; http://secunia.com/advisories/25380
CVE: CVE-2007-2846
Published: 2007-05-24
Description: Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3710&w=2; http://osvdb.org/36522; http://www.avast.com/eng/adnm-management-client-revision-history.html
CVE: CVE-2007-2847
Published: 2007-05-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameter, different vectors than CVE-2007-0840 and CVE-2007-2812.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/36215; http://www.securityfocus.com/archive/1/469291/100/0/threaded; http://www.securityfocus.com/bid/24102
CVE: CVE-2007-2848
Published: 2007-05-24
Description: Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control (shcmb80.ocx) in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/36581; http://secunia.com/advisories/25269; http://www.securityfocus.com/bid/24113
CVE: CVE-2007-2849
Published: 2007-05-24
Description: KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/36578; http://secunia.com/advisories/25360; http://sourceforge.net/forum/forum.php?forum_id=698243
CVE: CVE-2007-2850
Published: 2007-05-24
Description: The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
CVSS Score: 10.0 (HIGH)
References: http://fortconsult.net/files/fortconsult.dk/citrix_advisory.pdf; http://secunia.com/advisories/25371; http://support.citrix.com/article/CTX112964
CVE: CVE-2007-2851
Published: 2007-05-24
Description: A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method.
CVSS Score: 7.5 (HIGH)
References: http://moaxb.blogspot.com/2007/05/moaxb-21-leadtools-raster-variant.html; http://osvdb.org/36033; http://www.securityfocus.com/bid/24075
CVE: CVE-2007-2852
Published: 2007-05-24
Description: Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted directory name.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/36650; http://secunia.com/advisories/25375; http://securityreason.com/securityalert/2733
CVE: CVE-2007-2853
Published: 2007-05-24
Description: The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/38099; http://www.securityfocus.com/bid/24087; https://www.exploit-db.com/exploits/3967
CVE: CVE-2007-2854
Published: 2007-05-24
Description: Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) style or (2) langue parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36316; http://secunia.com/advisories/25382; http://www.securityfocus.com/bid/24094
CVE: CVE-2007-2855
Published: 2007-05-24
Description: Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2856.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://moaxb.blogspot.com/2007/05/moaxb-22-bonus-dart-ziplite-compression.html; http://osvdb.org/38110; http://shinnai.altervista.org/viewtopic.php?id=42&t_id=25
CVE: CVE-2007-2856
Published: 2007-05-24
Description: Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/38111; http://retrogod.altervista.org/ie_DartZip_bof.html; http://www.securityfocus.com/archive/1/469503/100/0/threaded
CVE: CVE-2007-2857
Published: 2007-05-24
Description: PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the parser_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38112; http://securityreason.com/securityalert/2732; http://www.securityfocus.com/archive/1/469298/100/0/threaded
CVE: CVE-2007-2858
Published: 2007-05-24
Description: SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/37534; http://securityreason.com/securityalert/2731; http://www.securityfocus.com/archive/1/469299/100/0/threaded
CVE: CVE-2007-2859
Published: 2007-05-24
Description: Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the path_simpgb parameter to (1) guestbook.php, (2) search.php, (3) mailer.php, (4) avatars.php, (5) ccode.php, (6) comments.php, (7) emoticons.php, (8) gbdownload.php, and possibly other PHP scripts.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38101; http://osvdb.org/38102; http://osvdb.org/38103
CVE: CVE-2007-2860
Published: 2007-05-24
Description: user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/41027; http://securityreason.com/securityalert/2736; http://www.securityfocus.com/archive/1/469226/100/0/threaded
CVE: CVE-2007-2861
Published: 2007-05-24
Description: Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News (SAXON) 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) news.php, (2) preview.php, or (3) archive-display.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38354; http://osvdb.org/38355; http://securityreason.com/securityalert/2734
CVE: CVE-2007-2862
Published: 2007-05-24
Description: Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQL commands via an unspecified parameter to cart.inc.php and certain other files in an include directory, related to missing sanitization of the $option variable and possibly cookie modification.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38100; http://securityreason.com/securityalert/2730; http://www.securityfocus.com/archive/1/469301/100/0/threaded
CVE: CVE-2007-0740
Published: 2007-05-24
Description: Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, which might allow user-assisted attackers to trick a user into executing malicious files.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://secunia.com/advisories/25402
CVE: CVE-2007-0750
Published: 2007-05-24
Description: Integer overflow in CoreGraphics in Apple Mac OS X 10.4 up to 10.4.9 allows remote user-assisted attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted PDF file.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://secunia.com/advisories/25402
CVE: CVE-2007-0751
Published: 2007-05-24
Description: A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow local users to cause a denial of service, related to the find command.
CVSS Score: 2.1 (LOW)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://secunia.com/advisories/25402
CVE: CVE-2007-0752
Published: 2007-05-24
Description: The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient privileges, which allows local users to load arbitrary plugins and gain root privileges by bypassing this check.
CVSS Score: 7.2 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305530; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=537; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
CVE: CVE-2007-0753
Published: 2007-05-24
Description: Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-134
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://secunia.com/advisories/25402
CVE: CVE-2007-2386
Published: 2007-05-24
Description: Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.
CVSS Score: 9.4 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/Jun/msg00001.html; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
CVE: CVE-2007-2390
Published: 2007-05-24
Description: Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.
CVSS Score: 10.0 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://secunia.com/advisories/25402
CVE: CVE-2007-1860
Published: 2007-05-25
Description: mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://docs.info.apple.com/article.html?artnum=306172; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795; http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
CVE: CVE-2007-2865
Published: 2007-05-25
Description: Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter.
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0713&w=2; http://osvdb.org/38138; http://secunia.com/advisories/27756
CVE: CVE-2007-2866
Published: 2007-05-25
Description: Multiple SQL injection vulnerabilities in modules/admin/modules/gallery.php in PHPEcho CMS 2.0-rc1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter and possibly other parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38053; http://sourceforge.net/project/shownotes.php?release_id=495821&group_id=186100; http://www.vupen.com/english/advisories/2007/1937
CVE: CVE-2007-2451
Published: 2007-05-29
Description: Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES in the Linux kernel before 2.6.21.3 allows attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21.3; http://lwn.net/Articles/235711/; http://osvdb.org/35925
CVE: CVE-2007-2877
Published: 2007-05-29
Description: Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) before 8.5a6 allows local users to gain privileges via long registry key paths.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/36528; http://secunia.com/advisories/25401; http://sourceforge.net/project/shownotes.php?group_id=10894&release_id=503937
CVE: CVE-2007-2878
Published: 2007-05-29
Description: The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/35926; http://secunia.com/advisories/25505; http://secunia.com/advisories/26133
CVE: CVE-2007-2879
Published: 2007-05-29
Description: Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/38139; http://securityreason.com/securityalert/2737; http://www.securityfocus.com/archive/1/469584/100/0/threaded
CVE: CVE-2007-2880
Published: 2007-05-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Room_name parameter to room/info_book.asp or the (2) curYear parameter to room/week.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36482; http://osvdb.org/36483; http://secunia.com/advisories/25422
CVE: CVE-2007-2881
Published: 2007-05-29
Description: Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
CVSS Score: 10.0 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536; http://osvdb.org/35841; http://secunia.com/advisories/25405
CVE: CVE-2007-0246
Published: 2007-05-29
Description: plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO.
CVSS Score: 6.8 (MEDIUM)
References: http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/plugins/scmcvs/www/cvsweb.php?root=gforge&r1=5849&r2=6038&pathrev=6038; http://osvdb.org/36526; http://secunia.com/advisories/25395
CVE: CVE-2007-2388
Published: 2007-05-29
Description: Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2007/May/msg00005.html; http://secunia.com/advisories/25130; http://secunia.com/secunia_research/2007-52/advisory/
CVE: CVE-2007-2389
Published: 2007-05-29
Description: Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets.
CVSS Score: 7.1 (HIGH)
References: http://lists.apple.com/archives/security-announce/2007/May/msg00005.html; http://secunia.com/advisories/25130; http://www.kb.cert.org/vuls/id/434748
CVE: CVE-2007-2882
Published: 2007-05-30
Description: Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remote attackers to cause a denial of service (crash) via certain Access Control List (acl) packets.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/34908; http://secunia.com/advisories/25403; http://secunia.com/advisories/25879
CVE: CVE-2007-2883
Published: 2007-05-30
Description: Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by (1) reading the paging file or (2) dumping and searching the memory image.  NOTE: This issue crosses privilege boundaries because the product is intended to protect the data on a stolen computer.
CVSS Score: 4.6 (MEDIUM)
References: http://osvdb.org/36524; http://secunia.com/advisories/25410; http://securityreason.com/securityalert/2753
CVE: CVE-2007-2884
Published: 2007-05-30
Description: Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via a Visual Basic Project (vbp) file with a long (1) Description or (2) Company Name (VersionCompanyName) field.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20, CWE-399
References: http://osvdb.org/41052; http://osvdb.org/41053; http://www.securityfocus.com/bid/24128
CVE: CVE-2007-2885
Published: 2007-05-30
Description: The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools (MSVDT) Database Designer 7.0 allows remote attackers to cause a denial of service (Internet Explorer 6 crash) via a long argument.
CVSS Score: 4.3 (MEDIUM)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/24127.html; http://osvdb.org/38140; http://www.securityfocus.com/bid/24127