deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-3946
Published: 2008-09-05
Description: The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a (1) .plan or (2) .project file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-59
References: http://deathrow.vistech.net/DEFCON16/VMS.PDF; https://exchange.xforce.ibmcloud.com/vulnerabilities/45135; http://deathrow.vistech.net/DEFCON16/VMS.PDF
CVE: CVE-2008-3947
Published: 2008-09-05
Description: DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://deathrow.vistech.net/DEFCON16/VMS.PDF; http://www.securitytracker.com/id?1020827; https://exchange.xforce.ibmcloud.com/vulnerabilities/45047
CVE: CVE-2008-3948
Published: 2008-09-05
Description: SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4229; http://www.securityfocus.com/archive/1/495981/100/0/threaded; http://www.securityfocus.com/bid/31008
CVE: CVE-2007-5348
Published: 2008-09-11
Description: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka "GDI+ VML Buffer Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=743; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://secunia.com/advisories/32154
CVE: CVE-2007-6717
Published: 2008-09-11
Description: Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/27437; http://www.ibm.com/support/docview.wss?uid=isg1IZ03054; http://www.ibm.com/support/docview.wss?uid=isg1IZ03060
CVE: CVE-2008-2253
Published: 2008-09-11
Description: Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=766863#PRODUCTS; http://www.securityfocus.com/bid/30550
CVE: CVE-2008-2326
Published: 2008-09-11
Description: mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html; http://secunia.com/advisories/31822; http://support.apple.com/kb/HT2990
CVE: CVE-2008-2464
Published: 2008-09-11
Description: The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service (divide-by-zero error and panic) via a malformed ICMPv6 Multicast Listener Discovery (MLD) query with a certain Maximum Response Delay value.
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: http://cert.fi/haavoittuvuudet/2008/advisory-netbsd.html; http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c; http://cvsweb.netbsd.org/bsdweb.cgi/src/sys/netinet6/mld6.c.diff?r1=1.46&r2=1.47&f=h
CVE: CVE-2008-3007
Published: 2008-09-11
Description: Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold and SP1, and Office OneNote 2007 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted onenote:// URL, aka "Uniform Resource Locator Validation Error Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://www.insomniasec.com/advisories/ISVA-080910.1.htm; http://www.securityfocus.com/archive/1/496178/100/0/threaded
CVE: CVE-2008-3008
Published: 2008-09-11
Description: Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://www.kb.cert.org/vuls/id/996227; http://www.securityfocus.com/bid/31065
CVE: CVE-2008-3012
Published: 2008-09-11
Description: gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 does not properly perform memory allocation, which allows remote attackers to execute arbitrary code via a malformed EMF image file, aka "GDI+ EMF Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://secunia.com/advisories/32154; http://www.securityfocus.com/bid/31019
CVE: CVE-2008-3013
Published: 2008-09-11
Description: gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://ifsec.blogspot.com/2008/09/windows-gdi-gif-memory-corruption.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://secunia.com/advisories/32154
CVE: CVE-2008-3014
Published: 2008-09-11
Description: Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka "GDI+ WMF Buffer Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://secunia.com/advisories/32154; http://www.securityfocus.com/bid/31021
CVE: CVE-2008-3015
Published: 2008-09-11
Description: Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka "GDI+ BMP Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3992&w=2; http://secunia.com/advisories/32154; http://www.evilfingers.com/patchTuesday/MS08_052_GDI+_Vulnerability.txt
CVE: CVE-2008-3539
Published: 2008-09-11
Description: Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1581&w=2; http://secunia.com/advisories/31764; http://securityreason.com/securityalert/4236
CVE: CVE-2008-3612
Published: 2008-09-11
Description: The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html; http://secunia.com/advisories/31823
CVE: CVE-2008-3614
Published: 2008-09-11
Description: Integer overflow in Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, which triggers heap corruption.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=744; http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
CVE: CVE-2008-3615
Published: 2008-09-11
Description: ir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, accesses uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://secunia.com/advisories/31821; http://securitytracker.com/id?1020841
CVE: CVE-2008-3624
Published: 2008-09-11
Description: Heap-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted panorama atoms.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://secunia.com/advisories/31821; http://securitytracker.com/id?1020841
CVE: CVE-2008-3625
Published: 2008-09-11
Description: Stack-based buffer overflow in Apple QuickTime before 7.5.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a QuickTime Virtual Reality (QTVR) movie file with crafted (1) maxTilt, (2) minFieldOfView, and (3) maxFieldOfView elements in panorama track PDAT atoms.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://secunia.com/advisories/31821; http://securitytracker.com/id?1020841
CVE: CVE-2008-3626
Published: 2008-09-11
Description: The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1288&w=2
CVE: CVE-2008-3627
Published: 2008-09-11
Description: Apple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within QuickTimeH264.qtx, (2) MDAT atoms in mov video files within QuickTimeH264.scalar, and (3) AVC1 atoms in an unknown media type within an unspecified component, which allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via a crafted, H.264 encoded movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://secunia.com/advisories/31821; http://securitytracker.com/id?1020841
CVE: CVE-2008-3628
Published: 2008-09-11
Description: Apple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image, related to an "invalid pointer issue."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://secunia.com/advisories/31821; http://securitytracker.com/id?1020841
CVE: CVE-2008-3629
Published: 2008-09-11
Description: Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html; http://secunia.com/advisories/31821
CVE: CVE-2008-3630
Published: 2008-09-11
Description: mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html; http://secunia.com/advisories/31822; http://support.apple.com/kb/HT2990
CVE: CVE-2008-3631
Published: 2008-09-11
Description: Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html; http://secunia.com/advisories/31823
CVE: CVE-2008-3632
Published: 2008-09-11
Description: Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a web page with crafted Cascading Style Sheets (CSS) import statements.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
CVE: CVE-2008-3634
Published: 2008-09-11
Description: Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html; http://securitytracker.com/id?1020840; http://www.securityfocus.com/bid/31090
CVE: CVE-2008-3635
Published: 2008-09-11
Description: Stack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3.2 (aka IV32) codec for QuickTime, when used with Apple QuickTime before 7.5.5 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html; http://secunia.com/advisories/31821; http://securitytracker.com/id?1020841
CVE: CVE-2008-3636
Published: 2008-09-11
Description: Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys.  However, the root cause is the integer overflow in the API call itself.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html; http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html; http://securitytracker.com/id?1020839
CVE: CVE-2008-3912
Published: 2008-09-11
Description: libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an out-of-memory condition.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://kolab.org/security/kolab-vendor-notice-22.txt; http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
CVE: CVE-2008-3913
Published: 2008-09-11
Description: Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) via unspecified vectors related to "error handling logic".
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-401
References: http://kolab.org/security/kolab-vendor-notice-22.txt; http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
CVE: CVE-2008-3914
Published: 2008-09-11
Description: Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "error path" in (1) libclamav/others.c and (2) libclamav/sis.c.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://kolab.org/security/kolab-vendor-notice-22.txt; http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
CVE: CVE-2008-3915
Published: 2008-09-11
Description: Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f; http://lkml.org/lkml/2008/9/3/286; http://secunia.com/advisories/31881
CVE: CVE-2008-3951
Published: 2008-09-11
Description: SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the ann_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4230; http://www.securityfocus.com/bid/31032; https://exchange.xforce.ibmcloud.com/vulnerabilities/44945
CVE: CVE-2008-3952
Published: 2008-09-11
Description: SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4231; http://www.securityfocus.com/bid/31036; https://exchange.xforce.ibmcloud.com/vulnerabilities/44957
CVE: CVE-2008-3953
Published: 2008-09-11
Description: SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL commands via the tage parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4232; http://www.securityfocus.com/bid/31039; https://exchange.xforce.ibmcloud.com/vulnerabilities/44947
CVE: CVE-2008-3954
Published: 2008-09-11
Description: SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4233; http://www.securityfocus.com/bid/31048; http://www.securitytracker.com/id?1020829
CVE: CVE-2008-3955
Published: 2008-09-11
Description: SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://bugreport.ir/index_52.htm; http://securityreason.com/securityalert/4234; http://www.securityfocus.com/bid/31046
CVE: CVE-2008-3956
Published: 2008-09-11
Description: orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.nullcode.com.ar/ncs/crash/orgchart.htm; http://www.securityfocus.com/bid/31059; https://exchange.xforce.ibmcloud.com/vulnerabilities/44993
CVE: CVE-2008-3957
Published: 2008-09-11
Description: The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument to the Save method.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/31069; http://www.securityfocus.com/data/vulnerabilities/exploits/31069; https://exchange.xforce.ibmcloud.com/vulnerabilities/45015
CVE: CVE-2008-3958
Published: 2008-09-11
Description: IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.  NOTE: this may overlap CVE-2008-3858.  NOTE: this issue exists because of an incomplete fix for CVE-2008-3959.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v82/APARLIST.TXT; http://osvdb.org/48144; http://secunia.com/advisories/31787
CVE: CVE-2008-3959
Published: 2008-09-11
Description: IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instance crash) via a crafted SQLJRA packet within a CONNECT/ATTACH data stream that simulates a V7 client connect/attach request.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/29022; http://www-1.ibm.com/support/docview.wss?uid=swg1IZ05043; http://www.appsecinc.com/resources/alerts/db2/2008-01.shtml