deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-6410
Published: 2007-12-17
Description: Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://securityreason.com/securityalert/3458; http://www.securityfocus.com/archive/1/484607/100/0/threaded; http://securityreason.com/securityalert/3458
CVE: CVE-2007-6411
Published: 2007-12-17
Description: Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (gg.exe process crash) via a long string in an emots.txt file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3455; http://vexillium.org/advisory_eng.txt; http://www.securityfocus.com/archive/1/484077/100/200/threaded
CVE: CVE-2007-6412
Published: 2007-12-17
Description: Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to inject arbitrary PHP code via an editcomments action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/40148; http://securityreason.com/securityalert/3428; http://securityreason.com/securityalert/3454
CVE: CVE-2007-4473
Published: 2007-12-17
Description: Gesytec Easylon OPC Server before 2.3.44 does not properly validate server handles, which allows remote attackers to execute arbitrary code or cause a denial of service via unspecified network traffic to the OLE for Process Control (OPC) interface, probably related to free operations on arbitrary memory addresses through certain Remove functions, and read and write operations on arbitrary memory addresses through certain Set, Read, and Write functions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/42650; http://secunia.com/advisories/28079; http://www.kb.cert.org/vuls/id/205073
CVE: CVE-2007-6413
Published: 2007-12-17
Description: Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attackers to bypass certain netgroup restrictions and obtain root access to a filesystem via NFS requests from a client root user.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://osvdb.org/40829; http://secunia.com/advisories/28096; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103162-1
CVE: CVE-2007-6414
Published: 2007-12-17
Description: admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication and obtain administrative credentials via a direct request.  NOTE: this can be leveraged for arbitrary code execution through a request to admin/videolinks_view.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: http://secunia.com/advisories/28064; http://www.securityfocus.com/bid/26870; https://exchange.xforce.ibmcloud.com/vulnerabilities/39034
CVE: CVE-2007-6416
Published: 2007-12-17
Description: The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/41344; http://secunia.com/advisories/28146; http://secunia.com/advisories/28643
CVE: CVE-2007-6417
Published: 2007-12-18
Description: The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).
CVSS Score: 7.2 (HIGH)
CWE: CWE-200, CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]2379&w=2; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]9347&w=2
CVE: CVE-2007-6418
Published: 2007-12-18
Description: The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allow local users to read the password by listing the process and its arguments.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448519; http://osvdb.org/44138; http://secunia.com/advisories/29059
CVE: CVE-2007-5583
Published: 2007-12-18
Description: Cisco IP Phone 7940 with firmware P0S3-08-7-00 allows remote attackers to cause a denial of service ("486 Busy" responses or device reboot) via a sequence of SIP INVITE transactions in which the Request-URI lacks a user name, a different vulnerability than CVE-2007-4459.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058837.html; http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058932.html; http://seclists.org/fulldisclosure/2007/Dec/0196.html
CVE: CVE-2007-6283
Published: 2007-12-18
Description: Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/28180; http://secunia.com/advisories/30313; http://www.redhat.com/support/errata/RHSA-2008-0300.html
CVE: CVE-2007-6424
Published: 2007-12-18
Description: registry.pl in Fonality Trixbox 2.0 PBX products, when running in certain environments, reads and executes a set of commands from a remote web site without sufficiently validating the origin of the commands, which allows remote attackers to disable trixbox and execute arbitrary commands via a DNS spoofing attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/44136; http://voipsa.org/blog/2007/12/17/trixbox-contains-phone-home-code-to-retrieve-arbitrary-commands-to-execute/; http://voipsa.org/pipermail/voipsec_voipsa.org/2007-December/002522.html
CVE: CVE-2007-5862
Published: 2007-12-18
Description: Java in Mac OS X 10.4 through 10.4.11 allows remote attackers to bypass Keychain access controls and add or delete arbitrary Keychain items via a crafted Java applet.
CVSS Score: 9.4 (HIGH)
CWE: CWE-287
References: http://docs.info.apple.com/article.html?artnum=307177; http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html; http://secunia.com/advisories/28115
CVE: CVE-2007-6354
Published: 2007-12-18
Description: Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
CVSS Score: 10.0 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=202354; http://johnst.org/sw/exiftags/CHANGES; http://secunia.com/advisories/28110
CVE: CVE-2007-6355
Published: 2007-12-18
Description: Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=202354; http://johnst.org/sw/exiftags/CHANGES; http://secunia.com/advisories/28110
CVE: CVE-2007-6356
Published: 2007-12-18
Description: exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=202354; http://johnst.org/sw/exiftags/CHANGES; http://secunia.com/advisories/28110
CVE: CVE-2007-6433
Published: 2007-12-18
Description: The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remote attackers to inject and execute arbitrary EJBQL commands via the order parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jira.jboss.com/jira/browse/JBSEAM-2084; http://osvdb.org/42631; http://secunia.com/advisories/28077
CVE: CVE-2007-6434
Published: 2007-12-18
Description: Linux kernel 2.6.23 allows local users to create low pages in virtual userspace memory and bypass mmap_min_addr protection via a crafted executable file that calls the do_brk function.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.24-rc5; http://osvdb.org/40907; http://secunia.com/advisories/28070
CVE: CVE-2007-6435
Published: 2007-12-18
Description: Stack-based buffer overflow in Novell GroupWise before 6.5.7, when HTML preview of e-mail is enabled, allows user-assisted remote attackers to execute arbitrary code via a long SRC attribute in an IMG element when forwarding or replying to a crafted e-mail.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/40870; http://secunia.com/advisories/28102; http://securityreason.com/securityalert/3459
CVE: CVE-2007-6436
Published: 2007-12-18
Description: Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted document, as actively exploited in December 2007 by the Tarodrop.F trojan.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27992; http://www.osvdb.org/39395; http://www.symantec.com/security_response/writeup.jsp?docid=2007[PII_REDACTED]-99
CVE: CVE-2007-3876
Published: 2007-12-19
Description: Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307179; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=633; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
CVE: CVE-2007-4708
Published: 2007-12-19
Description: Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler.
CVSS Score: 9.3 (HIGH)
CWE: CWE-134
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-4709
Published: 2007-12-19
Description: Directory traversal vulnerability in CFNetwork in Apple Mac OS X 10.5.1 allows remote attackers to overwrite arbitrary files via a crafted HTTP response.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-4710
Published: 2007-12-19
Description: Unspecified vulnerability in ColorSync in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via an image with a crafted ColorSync profile, which triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5847
Published: 2007-12-19
Description: Race condition in the CFURLWriteDataAndPropertiesToResource API in Core Foundation in Apple Mac OS X 10.4.11 creates files with insecure permissions, which might allow local users to obtain sensitive information.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-362
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5848
Published: 2007-12-19
Description: Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html
CVE: CVE-2007-5849
Published: 2007-12-19
Description: Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://bugs.gentoo.org/show_bug.cgi?id=201570; http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
CVE: CVE-2007-5850
Published: 2007-12-19
Description: Heap-based buffer overflow in Desktop Services in Apple Mac OS X 10.4.11 allows user-assisted attackers to execute arbitrary code via a directory with a crafted .DS_Store file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5851
Published: 2007-12-19
Description: iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5853
Published: 2007-12-19
Description: Unspecified vulnerability in IO Storage Family in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (system shutdown) or execute arbitrary code via a disk image with crafted GUID partition maps, which triggers memory corruption.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5854
Published: 2007-12-19
Description: Launch Services in Apple Mac OS X 10.4.11 and 10.5.1 does not treat HTML files as unsafe content, which allows attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information via a crafted HTML file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5855
Published: 2007-12-19
Description: Mail in Apple Mac OS X 10.4.11 and 10.5.1, when an SMTP account has been set up using Account Assistant, can use plaintext authentication even when MD5 Challenge-Response authentication is available, which makes it easier for remote attackers to sniff account activity.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-287
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5856
Published: 2007-12-19
Description: Quick Look Apple Mac OS X 10.5.1, when previewing an HTML file, does not prevent plug-ins from making network requests, which might allow remote attackers to obtain sensitive information.
CVSS Score: 9.4 (HIGH)
CWE: CWE-16, CWE-264
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5857
Published: 2007-12-19
Description: Quick Look in Apple Mac OS X 10.5.1 does not prevent a movie from accessing URLs when the movie file is previewed or if an icon is created, which might allow remote attackers to obtain sensitive information via HREFTrack.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5858
Published: 2007-12-19
Description: WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.info.apple.com/article.html?artnum=307178; http://docs.info.apple.com/article.html?artnum=307179; http://docs.info.apple.com/article.html?artnum=307302
CVE: CVE-2007-5859
Published: 2007-12-19
Description: Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted feed: URL that triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5860
Published: 2007-12-19
Description: Unspecified vulnerability in Spin Tracer in Apple Mac OS X 10.5.1 allows local users to execute arbitrary code via unspecified output files, involving an "insecure file operation."
CVSS Score: 7.2 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5861
Published: 2007-12-19
Description: Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-5863
Published: 2007-12-19
Description: Software Update in Apple Mac OS X 10.5.1 allows remote attackers to execute arbitrary commands via a man-in-the-middle (MITM) attack between the client and the server, using a modified distribution definition file with the "allow-external-scripts" option.
CVSS Score: 9.3 (HIGH)
CWE: CWE-310
References: http://docs.info.apple.com/article.html?artnum=307179; http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html; http://secunia.com/advisories/28136
CVE: CVE-2007-6437
Published: 2007-12-19
Description: Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/bugtraq/2007/Dec/0202.html; http://secunia.com/advisories/28118; http://secunia.com/advisories/28279
CVE: CVE-2007-6438
Published: 2007-12-19
Description: Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors.  NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6439
Published: 2007-12-19
Description: Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116.  The DCP ETSI issue is already covered by CVE-2007-6119.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6440
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6112.  Reason: This candidate is a duplicate of CVE-2007-6112.  Notes: All CVE users should reference CVE-2007-6112 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-119
CVE: CVE-2007-6441
Published: 2007-12-19
Description: The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms."
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://bugs.gentoo.org/show_bug.cgi?id=199958; http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html; http://secunia.com/advisories/27777
CVE: CVE-2007-6442
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6114.  Reason: This candidate is a duplicate of CVE-2007-6114.  Notes: All CVE users should reference CVE-2007-6114 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-119
CVE: CVE-2007-6443
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6115.  Reason: This candidate is a duplicate of CVE-2007-6115.  Notes: All CVE users should reference CVE-2007-6115 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-119
CVE: CVE-2007-6444
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6113.  Reason: This candidate is a duplicate of CVE-2007-6113, Notes: All CVE users should reference CVE-2007-6113 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-20
CVE: CVE-2007-6445
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6117.  Reason: This candidate is a duplicate of CVE-2007-6117.  Notes: All CVE users should reference CVE-2007-6117 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-20
CVE: CVE-2007-6446
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6118.  Reason: This candidate is a duplicate of CVE-2007-6118.  Notes: All CVE users should reference CVE-2007-6118 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-399
CVE: CVE-2007-6447
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6114.  Reason: This candidate is a duplicate of CVE-2007-6114.  Notes: All CVE users should reference CVE-2007-6114 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-119
CVE: CVE-2007-6448
Published: 2007-12-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6120.  Reason: This candidate is a duplicate of CVE-2007-6120.  Notes: All CVE users should reference CVE-2007-6120 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-20, CWE-119