deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-6484
Published: 2007-12-20
Description: SQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute arbitrary SQL commands via the password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/27968; http://secunia.com/advisories/27968
CVE: CVE-2007-6485
Published: 2007-12-20
Description: Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to (1) MakeXML.php or (2) MakeXML4statusCounter.php in include/monitoring/engine/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/28112; http://securityreason.com/securityalert/3472; http://www.osvdb.org/39226
CVE: CVE-2007-6486
Published: 2007-12-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in shout.php (aka the shoutbox) in LineShout 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username (nickname) or (2) message parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://davidsopas.com/blog/2007/12/17/lineshout-v10-software-html-injection/; http://secunia.com/advisories/28137; http://www.securityfocus.com/bid/26906
CVE: CVE-2007-6487
Published: 2007-12-20
Description: Unspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated users with Secondary Admin privileges to create Admin accounts, a different vulnerability than CVE-2006-0680.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/42632; http://secunia.com/advisories/28059; http://www.plainblack.com/bugs/tracker/secondary-admin-can-create-user-with-admin-privilege
CVE: CVE-2007-6488
Published: 2007-12-20
Description: Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the dir[classes] parameter to sitemap.xml.php or (2) the error parameter to errors.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/40985; http://osvdb.org/40986; http://secunia.com/advisories/28047
CVE: CVE-2007-6489
Published: 2007-12-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gb_mail, (2) gb_name, and (3) gb_text parameters in a guestbook action to index.php, and unspecified other vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/40987; http://secunia.com/advisories/28047; http://www.vupen.com/english/advisories/2007/4173
CVE: CVE-2007-6490
Published: 2007-12-20
Description: Cross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a password via a certain changepass action to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/40988; http://secunia.com/advisories/28047; http://www.vupen.com/english/advisories/2007/4173
CVE: CVE-2007-6491
Published: 2007-12-20
Description: Multiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to execute arbitrary SQL commands via (1) the cat_id parameter to categories.asp; and probably (2) the document_id parameter to categories.asp, and the (3) cat_id and (4) document_id parameters to subcategory.asp.
CVSS Score: 10.0 (HIGH)
CWE: CWE-89
References: http://osvdb.org/43709; http://osvdb.org/43710; http://securityreason.com/securityalert/3473
CVE: CVE-2007-6492
Published: 2007-12-20
Description: The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via an empty string in the argument to the ProcessRequestEx method.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://osvdb.org/40240; http://retrogod.altervista.org/rgod_imesh.html; http://secunia.com/advisories/28134
CVE: CVE-2007-6493
Published: 2007-12-20
Description: The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/40239; http://retrogod.altervista.org/rgod_imesh.html; http://secunia.com/advisories/28134
CVE: CVE-2007-6494
Published: 2007-12-20
Description: Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideAction and ChangeSkin parameters.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/44186; http://securityreason.com/securityalert/3474; http://securitytracker.com/id?1019222
CVE: CVE-2007-6495
Published: 2007-12-20
Description: inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to accounts/AccountActions.asp.  NOTE: this can be leveraged for remote code execution by changing the permissions of \Forum\db, which is configured for execution of ASP scripts with administrative privileges, and then uploading a script to \Forum\db.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://osvdb.org/44184; http://secunia.com/advisories/28973
CVE: CVE-2007-6496
Published: 2007-12-20
Description: Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to CVE-2005-1654.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securityreason.com/securityalert/3474
CVE: CVE-2007-6497
Published: 2007-12-20
Description: Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a credit amount and increase a discount via an UpdateUser action to Accounts/AccountActions.asp with modified UserName, FullName, CreditLimit, and DefaultDiscount parameters, a related issue to CVE-2005-2219.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securityreason.com/securityalert/3474
CVE: CVE-2007-6498
Published: 2007-12-20
Description: Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) email and (2) loginname parameters to Hosting/Addreseller.asp, (3) the sortfield parameter to accounts/accountmanager.asp, (4) the GateWayID parameter to OpenApi/GatewayVariables.asp, and possibly (5) unspecified vectors to IIS/iibind.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3474; http://securitytracker.com/id?1019222; http://www.securityfocus.com/archive/1/485028/100/0/threaded
CVE: CVE-2007-6499
Published: 2007-12-20
Description: Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securityreason.com/securityalert/3474
CVE: CVE-2007-6500
Published: 2007-12-20
Description: Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariables.asp.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://osvdb.org/44185; http://secunia.com/advisories/28973
CVE: CVE-2007-6501
Published: 2007-12-20
Description: Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securityreason.com/securityalert/3474
CVE: CVE-2007-6502
Published: 2007-12-20
Description: Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via (1) the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and (2) certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or MSXML2.XMLHTTP objects, which trigger a response with the setup directory pathname in the HTML source; and (3) might allow remote attackers to obtain sensitive information via a request for /admin/forum/, which reveals the path in an error message when a forum is not found.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securityreason.com/securityalert/3474
CVE: CVE-2007-6503
Published: 2007-12-20
Description: Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/importhostingplans.asp; or (2) change an arbitrary plan via a request to hosting/AutoSignUpPlans.asp with the (a) save, (b) 30, and (c) d_30 parameters.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securitytracker.com/id?1019222
CVE: CVE-2007-6504
Published: 2007-12-20
Description: Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an unspecified parameter.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html; http://secunia.com/advisories/28973; http://securitytracker.com/id?1019222
CVE: CVE-2007-6285
Published: 2007-12-20
Description: The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-16
References: http://osvdb.org/40442; http://rhn.redhat.com/errata/RHSA-2007-1176.html; http://rhn.redhat.com/errata/RHSA-2007-1177.html
CVE: CVE-2007-6334
Published: 2007-12-20
Description: Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/28183; http://secunia.com/advisories/28187; http://supportconnectw.ca.com/public/ingres/infodocs/ingresmswin-secnot.asp
CVE: CVE-2007-6341
Published: 2007-12-20
Description: Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://search.cpan.org/src/OLAF/Net-DNS-0.63/Changes; http://secunia.com/advisories/29343; http://secunia.com/advisories/29354
CVE: CVE-2007-6349
Published: 2007-12-20
Description: P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/28158; http://securityreason.com/securityalert/3476; http://www.osvdb.org/39297
CVE: CVE-2007-6505
Published: 2007-12-20
Description: Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities.
CVSS Score: 3.5 (LOW)
CWE: CWE-16
References: http://osvdb.org/44332; http://sunsolve.sun.com/search/document.do?assetkey=1-26-103172-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-201310-1
CVE: CVE-2007-6506
Published: 2007-12-20
Description: The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.
CVSS Score: 9.3 (HIGH)
References: http://blogs.zdnet.com/security/?p=768; http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818; http://it.slashdot.org/it/07/12/20/2327242.shtml
CVE: CVE-2007-6507
Published: 2007-12-20
Description: SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://osvdb.org/44318; http://secunia.com/advisories/26523; http://securityreason.com/securityalert/3475
CVE: CVE-2007-4567
Published: 2007-12-21
Description: The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted IPv6 packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://bugzilla.kernel.org/show_bug.cgi?id=8450; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e76b2b2567b83448c2ee85a896433b96150c92e6; http://secunia.com/advisories/25505
CVE: CVE-2007-6508
Published: 2007-12-21
Description: Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (dot dot slash) in the list parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://osvdb.org/44555; http://securityreason.com/securityalert/3477; http://www.securityfocus.com/archive/1/485335/100/0/threaded
CVE: CVE-2007-6509
Published: 2007-12-21
Description: Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]2714&w=2; http://secunia.com/advisories/28121; http://www.osvdb.org/39500
CVE: CVE-2007-6510
Published: 2007-12-21
Description: Multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the (1) AMOS-MusicBank, (2) FuzzacPacker, and (3) QuadraComposer rippers; and (4) have an unknown impact via a crafted file to the SkytPacker ripper.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/prowizbof-adv.txt; http://aluigi.org/poc/prowizbof.zip; http://secunia.com/advisories/28173
CVE: CVE-2007-6511
Published: 2007-12-21
Description: Websense Enterprise 6.3.1 allows remote attackers to bypass content filtering by visiting http URLs with a (1) RealPlayer G2, (2) MSMSGS, or (3) StoneHttpAgent User-Agent header, which results in a Non-HTTP categorization.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059092.html; http://mrhinkydink.blogspot.com/2007/12/websense-policy-filtering-bypass.html; http://secunia.com/advisories/28026
CVE: CVE-2007-6512
Published: 2007-12-21
Description: PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://osvdb.org/40232; http://securityreason.com/securityalert/3478; http://www.securityfocus.com/archive/1/485098/100/0/threaded
CVE: CVE-2007-6513
Published: 2007-12-21
Description: HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0470.html; http://www.heise-security.co.uk/news/100934; http://www.securityfocus.com/bid/26967
CVE: CVE-2007-6514
Published: 2007-12-21
Description: Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files for .php programs via a trailing "\" (backslash), which is not handled by the intended AddType directive.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3479; http://www.securityfocus.com/archive/1/485316/100/0/threaded; http://www.securityfocus.com/bid/26939
CVE: CVE-2007-6515
Published: 2007-12-21
Description: support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/39875; http://secunia.com/advisories/28182; http://securityreason.com/securityalert/3480
CVE: CVE-2007-6516
Published: 2007-12-21
Description: Buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://shinnai.altervista.org/exploits/txt/TXT_MiyDKP9PDPCRBoRpWq3N.html; http://www.securityfocus.com/bid/26934; https://exchange.xforce.ibmcloud.com/vulnerabilities/39140
CVE: CVE-2007-6419
Published: 2007-12-24
Description: Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01294324; http://secunia.com/advisories/28191; http://www.securityfocus.com/bid/26971
CVE: CVE-2007-6517
Published: 2007-12-24
Description: SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://aria-security.net/forum/showthread.php?p=1174; http://secunia.com/advisories/28193; http://www.osvdb.org/39383
CVE: CVE-2007-6518
Published: 2007-12-24
Description: Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board (wBB) Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the (1) showposts, (2) sortby, and (3) sortorder parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/28188; http://www.osvdb.org/39497; http://www.securityfocus.com/archive/1/485408/100/0/threaded
CVE: CVE-2007-6519
Published: 2007-12-24
Description: Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service (system crash) via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01310389; http://secunia.com/advisories/28192; http://www.securityfocus.com/bid/26964
CVE: CVE-2007-6520
Published: 2007-12-24
Description: Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks via unknown vectors related to plug-ins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.gentoo.org/show_bug.cgi?id=202770; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html; http://secunia.com/advisories/28169
CVE: CVE-2007-6521
Published: 2007-12-24
Description: Unspecified vulnerability in Opera before 9.25 allows remote attackers to execute arbitrary code via crafted TLS certificates.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://bugs.gentoo.org/show_bug.cgi?id=202770; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html; http://secunia.com/advisories/28169
CVE: CVE-2007-6522
Published: 2007-12-24
Description: The rich text editing functionality in Opera before 9.25 allows remote attackers to conduct cross-domain scripting attacks by using designMode to modify contents of pages in other domains.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.gentoo.org/show_bug.cgi?id=202770; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html; http://secunia.com/advisories/28169
CVE: CVE-2007-6523
Published: 2007-12-24
Description: Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189, CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html; http://secunia.com/advisories/28314; http://securityreason.com/securityalert/3482
CVE: CVE-2007-6524
Published: 2007-12-24
Description: Opera before 9.25 allows remote attackers to obtain potentially sensitive memory contents via a crafted bitmap (BMP) file, as demonstrated using a CANVAS element and JavaScript in an HTML document for copying these contents from 9.50 beta, a related issue to CVE-2008-0420.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://bugs.gentoo.org/show_bug.cgi?id=202770; http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00001.html; http://osvdb.org/42691
CVE: CVE-2007-4474
Published: 2007-12-27
Description: Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll, and dwa7w.dll, in Domino 6.x and 7.x allow remote attackers to execute arbitrary code, as demonstrated by an overflow from a long General_ServerName property value when calling the InstallBrowserHelperDll function in the Upload Module in the dwa7.dwa7.1 control in dwa7w.dll 7.0.34.1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/059233.html; http://osvdb.org/40954; http://secunia.com/advisories/28184