deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-2255
Published: 2008-08-13
Description: Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, a different vulnerability than CVE-2008-2254, aka "HTML Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31375; http://www.securitytracker.com/id?1020674
CVE: CVE-2008-2256
Published: 2008-08-13
Description: Microsoft Internet Explorer 5.01, 6, and 7 does not properly handle objects that have been incorrectly initialized or deleted, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, aka "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31375; http://www.securityfocus.com/bid/30611
CVE: CVE-2008-2257
Published: 2008-08-13
Description: Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object "appended in a specific order," aka "HTML Objects Memory Corruption Vulnerability" or "XHTML Rendering Memory Corruption Vulnerability," a different vulnerability than CVE-2008-2258.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31375; http://www.securityfocus.com/archive/1/495430/100/0/threaded
CVE: CVE-2008-2258
Published: 2008-08-13
Description: Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object "appended in a specific order" with "particular functions ... performed on" document objects, aka "HTML Objects Memory Corruption Vulnerability" or "Table Layout Memory Corruption Vulnerability," a different vulnerability than CVE-2008-2257.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31375; http://www.securityfocus.com/archive/1/495431/100/0/threaded
CVE: CVE-2008-2259
Published: 2008-08-13
Description: Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows remote attackers to execute arbitrary code via unknown vectors, aka "HTML Component Handling Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31375; http://www.securityfocus.com/bid/30612
CVE: CVE-2008-3514
Published: 2008-08-13
Description: VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other system users."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/31468; http://securityreason.com/securityalert/4150; http://www.insomniasec.com/advisories/ISVA-080812.1.htm
CVE: CVE-2008-3666
Published: 2008-08-13
Description: Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server with EnableSendFile configured; and (2) local users to cause a denial of service (panic) via a call to the sendfile system call, as reachable through the sendfilev library.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/47375; http://secunia.com/advisories/31426; http://sunsolve.sun.com/search/document.do?assetkey=1-26-239186-1
CVE: CVE-2008-1668
Published: 2008-08-13
Description: ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01525562; http://secunia.com/advisories/31471; http://www.openwall.com/lists/oss-security/2008/08/20/4
CVE: CVE-2008-3667
Published: 2008-08-13
Description: Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://downloads.securityfocus.com/vulnerabilities/exploits/30617-poc.pl; http://www.securityfocus.com/bid/30617; https://exchange.xforce.ibmcloud.com/vulnerabilities/44381
CVE: CVE-2008-3668
Published: 2008-08-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to (1) friends.php, (2) seutubo.php, (3) album.php, (4) scrapbook.php, (5) index.php, or (6) tribes.php; or (7) the description field of a new scrap.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lostmon.blogspot.com/2008/08/yogurt-social-network-multiple-scripts.html; http://www.securityfocus.com/bid/30618; http://www.securityfocus.com/bid/30619
CVE: CVE-2008-3669
Published: 2008-08-13
Description: SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews) allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31296; http://securityreason.com/securityalert/4151; http://www.securityfocus.com/bid/30445
CVE: CVE-2008-3670
Published: 2008-08-13
Description: SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL commands via the autid parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/31292; http://securityreason.com/securityalert/4149; http://www.securityfocus.com/bid/30452
CVE: CVE-2008-3671
Published: 2008-08-13
Description: Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/30856; http://www.securityfocus.com/bid/30456; http://secunia.com/advisories/30856
CVE: CVE-2008-3672
Published: 2008-08-13
Description: SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3673. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31291; https://exchange.xforce.ibmcloud.com/vulnerabilities/44112; http://secunia.com/advisories/31291
CVE: CVE-2008-3673
Published: 2008-08-13
Description: SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31291; http://securityreason.com/securityalert/4153; http://www.securityfocus.com/bid/30454
CVE: CVE-2008-3674
Published: 2008-08-13
Description: SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31276; http://securityreason.com/securityalert/4152; http://www.securityfocus.com/bid/30455
CVE: CVE-2008-3338
Published: 2008-08-13
Description: Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/31618; http://www.securityfocus.com/bid/30836; http://www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt
CVE: CVE-2008-3675
Published: 2008-08-14
Description: Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (dot dot) and possibly (2) a full pathname in the img parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31456; http://securityreason.com/securityalert/4154; http://www.securityfocus.com/bid/30672
CVE: CVE-2008-3676
Published: 2008-08-14
Description: Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/31480; http://securityreason.com/securityalert/4155; http://www.hmailserver.com/documentation/?page=changelog
CVE: CVE-2008-3677
Published: 2008-08-14
Description: Directory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2.197 allows remote attackers to include and execute arbitrary local files via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31475; http://sourceforge.net/project/shownotes.php?release_id=619467; http://www.securityfocus.com/bid/30676
CVE: CVE-2008-3678
Published: 2008-08-14
Description: Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31475; http://sourceforge.net/project/shownotes.php?release_id=619467; http://www.securityfocus.com/bid/30676
CVE: CVE-2008-3679
Published: 2008-08-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a (1) user_add, (2) recip, (3) tellafriend, or (4) contact action, or (5) in a request without an action; or (6) the id parameter in a tellafriend action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31487; http://www.securityfocus.com/bid/30665; http://www.securityfocus.com/bid/30665/exploit
CVE: CVE-2008-3680
Published: 2008-08-14
Description: The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/ventrilobotomy-adv.txt; http://aluigi.org/poc/ventrilobotomy.zip; http://secunia.com/advisories/31466
CVE: CVE-2008-3681
Published: 2008-08-14
Description: components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-core-password-remind-functionality.html; http://secunia.com/advisories/31457; http://securityreason.com/securityalert/4157
CVE: CVE-2008-3682
Published: 2008-08-14
Description: SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://packetstorm.linuxsecurity.com/0808-exploits/phprealty-sql.txt; http://secunia.com/advisories/31484; http://www.securityfocus.com/bid/30678
CVE: CVE-2008-2369
Published: 2008-08-14
Description: manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive information about user accounts and entitlements.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-798
References: http://rhn.redhat.com/errata/RHSA-2008-0630.html; http://secunia.com/advisories/31493; http://securitytracker.com/id?1020694
CVE: CVE-2008-2940
Published: 2008-08-14
Description: The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html; http://secunia.com/advisories/31470; http://secunia.com/advisories/31499
CVE: CVE-2008-2941
Published: 2008-08-14
Description: The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process stop) via a crafted packet, as demonstrated by sending "msg=0" to TCP port 2207.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html; http://secunia.com/advisories/31470; http://secunia.com/advisories/31499
CVE: CVE-2008-3683
Published: 2008-08-14
Description: Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service (failure to accept connections) via unknown vectors, probably related to exhaustion of file descriptors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/31476; http://sunsolve.sun.com/search/document.do?assetkey=1-26-240327-1; http://www.securityfocus.com/bid/30671
CVE: CVE-2008-3686
Published: 2008-08-14
Description: The rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service (kernel OOPS) via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5e0115e500fe9dd2ca11e6f92db9123204f1327a; http://lkml.org/lkml/2008/8/7/230; http://lkml.org/lkml/2008/8/8/7
CVE: CVE-2008-3687
Published: 2008-08-14
Description: Heap-based buffer overflow in the flask_security_label function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users (domU) to execute arbitrary code via the flask_op hypercall.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://invisiblethingslab.com/bh08/part2.pdf; http://secunia.com/advisories/31561; http://theinvisiblethings.blogspot.com/2008/08/our-xen-0wning-trilogy-highlights.html
CVE: CVE-2008-3688
Published: 2008-08-14
Description: sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-responsive server, which triggers an infinite loop due to an uninitialized variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: http://secunia.com/advisories/31494; http://secunia.com/advisories/31971; http://www.gentoo.org/security/en/glsa/glsa-200809-11.xml
CVE: CVE-2008-3443
Published: 2008-08-14
Description: The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to a Ruby socket, related to memory allocation failure, and as demonstrated against Webrick.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/31430; http://secunia.com/advisories/32165
CVE: CVE-2008-3699
Published: 2008-08-14
Description: The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://amarok.kde.org/en/releases/1/4/10; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494765; http://secunia.com/advisories/31418
CVE: CVE-2008-3658
Published: 2008-08-15
Description: Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=234102; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
CVE: CVE-2008-3659
Published: 2008-08-15
Description: Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function.  NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=234102; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
CVE: CVE-2008-3660
Published: 2008-08-15
Description: PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial of service (crash) via a request with multiple dots preceding the extension, as demonstrated using foo..php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.gentoo.org/show_bug.cgi?id=234102; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html
CVE: CVE-2008-3700
Published: 2008-08-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the sessionid parameter in a livesupport startclientchat action to visitor/index.php; (2) the filter parameter in a news view action to index.php; or the Full Name field in a (3) account creation, (4) ticket opening, or (5) chat request operation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forums.kayako.com/f3/3-30-00-stable-released-18304/; http://osvdb.org/47613; http://osvdb.org/47614
CVE: CVE-2008-3701
Published: 2008-08-15
Description: SQL injection vulnerability in staff/index.php in Kayako SupportSuite 3.20.02 and earlier allows remote authenticated users to execute arbitrary SQL commands via the customfieldlinkid parameter in a delcflink action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://forums.kayako.com/f3/3-30-00-stable-released-18304/; http://osvdb.org/47616; http://secunia.com/advisories/31431
CVE: CVE-2008-3702
Published: 2008-08-15
Description: Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long argument to the (1) ReadGIF or (2) ReadGIF2 method.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4159; http://www.securityfocus.com/bid/30621; https://exchange.xforce.ibmcloud.com/vulnerabilities/44412
CVE: CVE-2008-2233
Published: 2008-08-18
Description: The client in Openwsman 1.2.0 and 2.0.0, in unknown configurations, allows remote Openwsman servers to replay SSL sessions via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html; http://secunia.com/advisories/31429; http://www.securityfocus.com/bid/30694
CVE: CVE-2008-2234
Published: 2008-08-18
Description: Multiple buffer overflows in Openwsman 1.2.0 and 2.0.0 allow remote attackers to execute arbitrary code via a crafted "Authorization: Basic" HTTP header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00003.html; http://lists.vmware.com/pipermail/security-announce/2008/000034.html; http://secunia.com/advisories/31410
CVE: CVE-2008-3270
Published: 2008-08-18
Description: yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested.
CVSS Score: 2.6 (LOW)
CWE: CWE-310
References: http://secunia.com/advisories/31472; http://securitytracker.com/id?1020698; http://www.redhat.com/support/errata/RHSA-2008-0815.html
CVE: CVE-2008-3276
Published: 2008-08-18
Description: Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field.
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=3e8a0a559c66ee9e[PII_REDACTED]a56fefc3589740; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html; http://secunia.com/advisories/31509
CVE: CVE-2008-3324
Published: 2008-08-18
Description: The PartyGaming PartyPoker client program 121/120 does not properly verify the authenticity of updates, which allows remote man-in-the-middle attackers to execute arbitrary code via a Trojan horse update.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494
References: http://seclists.org/fulldisclosure/2008/Aug/0302.html; http://www.securityfocus.com/archive/1/495724/100/0/threaded; http://www.securityfocus.com/bid/30693
CVE: CVE-2008-3533
Published: 2008-08-18
Description: Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24 allows remote attackers to execute arbitrary code via format string specifiers in an invalid URI on the command line, as demonstrated by use of yelp within (1) man or (2) ghelp URI handlers in Firefox, Evolution, and unspecified other programs.
CVSS Score: 10.0 (HIGH)
CWE: CWE-134
References: http://bugzilla.gnome.org/attachment.cgi?id=115890; http://bugzilla.gnome.org/show_bug.cgi?id=546364; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html