deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-3597
Published: 2008-08-12
Description: Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by sending a "command 29" packet when the player is not in the game.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://aluigi.altervista.org/adv/skulltagod-adv.txt; http://secunia.com/advisories/31427; http://skulltag.com/forum/viewtopic.php?f=1&t=14716
CVE: CVE-2008-3598
Published: 2008-08-12
Description: Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/35500; http://secunia.com/advisories/25041/; http://securityreason.com/securityalert/4140
CVE: CVE-2008-3599
Published: 2008-08-12
Description: SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31408; http://securityreason.com/securityalert/4141; http://www.securityfocus.com/bid/30631
CVE: CVE-2008-3600
Published: 2008-08-12
Description: Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter within a modload action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://gallery.menalto.com/gallery_1.5.8_released; http://secunia.com/advisories/32662; http://security.gentoo.org/glsa/glsa-200811-02.xml
CVE: CVE-2008-3601
Published: 2008-08-12
Description: SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL commands via the forums array parameter in a search action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31419; http://securityreason.com/securityalert/4144; http://www.securityfocus.com/bid/30623
CVE: CVE-2008-3602
Published: 2008-08-12
Description: admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/4143; http://www.securityfocus.com/bid/30624; https://exchange.xforce.ibmcloud.com/vulnerabilities/44379
CVE: CVE-2008-3603
Published: 2008-08-12
Description: SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31421; http://www.securityfocus.com/bid/30626; https://exchange.xforce.ibmcloud.com/vulnerabilities/44375
CVE: CVE-2008-3604
Published: 2008-08-12
Description: SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://secunia.com/advisories/31413; http://securityreason.com/securityalert/4145; http://www.securityfocus.com/bid/30628
CVE: CVE-2008-3605
Published: 2008-08-12
Description: Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, allows remote attackers to conduct offline brute force attacks via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/31433; http://www.mcafee.com/apps/downloads/security_updates/hotfixes.asp?region=us&segment=enterprise; http://www.securityfocus.com/bid/30630
CVE: CVE-2008-3606
Published: 2008-08-12
Description: Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/31442; http://securityreason.com/securityalert/4146; http://www.securityfocus.com/archive/1/495264/100/0/threaded
CVE: CVE-2008-3607
Published: 2008-08-12
Description: The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (daemon crash) via multiple long LOGIN commands.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/4147; http://www.securityfocus.com/archive/1/495259/100/0/threaded; http://www.securityfocus.com/bid/30605
CVE: CVE-2008-2926
Published: 2008-08-12
Description: The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/31434; http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36559; http://www.securityfocus.com/archive/1/495397/100/0/threaded
CVE: CVE-2008-3003
Published: 2008-08-12
Description: Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31454; http://www.securityfocus.com/bid/30641
CVE: CVE-2008-3004
Published: 2008-08-12
Description: Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Indexing Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=740; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31454
CVE: CVE-2008-3005
Published: 2008-08-12
Description: Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31454
CVE: CVE-2008-3006
Published: 2008-08-12
Description: Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Record Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31454; http://secunia.com/advisories/31455
CVE: CVE-2008-3018
Published: 2008-08-12
Description: Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka the "Malformed PICT Filter Vulnerability," a different vulnerability than CVE-2008-3021.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31336; http://www.securityfocus.com/bid/30597
CVE: CVE-2008-3019
Published: 2008-08-12
Description: Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of an Encapsulated PostScript (EPS) file, which allows remote attackers to execute arbitrary code via a crafted EPS file, aka the "Malformed EPS Filter Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31336; http://www.securityfocus.com/bid/30595
CVE: CVE-2008-3020
Published: 2008-08-12
Description: Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31336; http://www.securityfocus.com/bid/30599
CVE: CVE-2008-3021
Published: 2008-08-12
Description: Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bits_per_pixel field, aka the "PICT Filter Parsing Vulnerability," a different vulnerability than CVE-2008-3018.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31336; http://www.securityfocus.com/archive/1/495429/100/0/threaded
CVE: CVE-2008-3174
Published: 2008-08-12
Description: Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/31434; http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=36560; http://www.securityfocus.com/archive/1/495397/100/0/threaded
CVE: CVE-2008-3275
Published: 2008-08-12
Description: The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d70b67c8bc72ee23b55381bd6a884f4796692f77; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.15; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
CVE: CVE-2008-3460
Published: 2008-08-12
Description: WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG file, aka the "WPG Image File Heap Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=737; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31336
CVE: CVE-2008-3648
Published: 2008-08-12
Description: nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/0808-advisories/Nslookup-Crash.txt; http://www.nullcode.com.ar/ncs/crash/nsloo.htm; http://www.securityfocus.com/bid/30636
CVE: CVE-2008-0082
Published: 2008-08-13
Description: An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote attackers to control the Messenger application, and "change state," obtain contact information, and establish audio or video connections without notification via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31446; http://www.securityfocus.com/archive/1/495467/100/0/threaded
CVE: CVE-2008-0120
Published: 2008-08-13
Description: Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=739; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31453
CVE: CVE-2008-0121
Published: 2008-08-13
Description: A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with an invalid picture index that triggers memory corruption, aka "Memory Calculation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=738; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31453
CVE: CVE-2008-1448
Published: 2008-08-13
Description: The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka "URL Parsing Cross-Domain Information Disclosure Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31415; http://www.coresecurity.com/content/internet-explorer-zone-elevation
CVE: CVE-2008-1455
Published: 2008-08-13
Description: A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 through SP1; and Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with crafted list values that trigger memory corruption, aka "Parsing Overflow Vulnerability."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31453; http://www.securityfocus.com/bid/30579
CVE: CVE-2008-2245
Published: 2008-08-13
Description: Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM) component on Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted image file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=742; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31385
CVE: CVE-2008-2246
Published: 2008-08-13
Description: Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31411; http://www.securityfocus.com/bid/30634
CVE: CVE-2008-2938
Published: 2008-08-13
Description: Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370.  NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
CVE: CVE-2008-3515
Published: 2008-08-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) viewer.swf and (2) loadflash.js, a different vulnerability than CVE-2008-3516.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31432; http://www.adobe.com/support/security/bulletins/apsb08-17.html; http://www.securityfocus.com/bid/30615
CVE: CVE-2008-3516
Published: 2008-08-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) viewer.swf and (2) loadflash.js, a different vulnerability than CVE-2008-3515.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31432; http://www.adobe.com/support/security/bulletins/apsb08-17.html; http://www.securityfocus.com/bid/30615
CVE: CVE-2008-3649
Published: 2008-08-13
Description: SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/31292; http://securityreason.com/securityalert/4149; http://www.securityfocus.com/bid/30453
CVE: CVE-2008-3650
Published: 2008-08-13
Description: Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to "unescaped output," possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.
CVSS Score: 9.0 (HIGH)
References: http://lists.horde.org/archives/announce/2008/000420.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/44479; http://lists.horde.org/archives/announce/2008/000420.html
CVE: CVE-2008-3651
Published: 2008-08-13
Description: Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE: CVE-2008-3652
Published: 2008-08-13
Description: src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE: CVE-2008-3653
Published: 2008-08-13
Description: Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://info.tikiwiki.org/tiki-read_article.php?articleId=35; https://exchange.xforce.ibmcloud.com/vulnerabilities/44422; http://info.tikiwiki.org/tiki-read_article.php?articleId=35
CVE: CVE-2008-3654
Published: 2008-08-13
Description: Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://info.tikiwiki.org/tiki-read_article.php?articleId=35; http://tikiwiki.org/ReleaseNotes20; https://exchange.xforce.ibmcloud.com/vulnerabilities/44421
CVE: CVE-2008-3655
Published: 2008-08-13
Description: Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/31430
CVE: CVE-2008-3656
Published: 2008-08-13
Description: Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/31430
CVE: CVE-2008-3657
Published: 2008-08-13
Description: The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/31430
CVE: CVE-2008-1456
Published: 2008-08-13
Description: Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute arbitrary code via a crafted event subscription request that is used to access an array of function pointers.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31417; http://www.securityfocus.com/bid/30586
CVE: CVE-2008-1457
Published: 2008-08-13
Description: The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote authenticated users to execute arbitrary code via a crafted event subscription request.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31417; http://www.securityfocus.com/bid/30584
CVE: CVE-2008-2254
Published: 2008-08-13
Description: Microsoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, aka "HTML Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6986&w=2; http://secunia.com/advisories/31375; http://www.securityfocus.com/bid/30614