deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-3691
Published: 2007-07-11
Description: Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) userid parameters, a different issue than CVE-2007-3630.
CVSS Score: 6.8 (MEDIUM)
References: http://attrition.org/pipermail/vim/2007-July/001705.html; http://osvdb.org/36298; http://secunia.com/advisories/25969
CVE: CVE-2007-3692
Published: 2007-07-11
Description: Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. (dot dot) in the name parameter.
CVSS Score: 7.8 (HIGH)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/38453; http://securitytracker.com/id?1018344
CVE: CVE-2007-3695
Published: 2007-07-11
Description: Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename.  NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source, and therefore perhaps the issue does not cross privilege boundaries and should not be included in CVE.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/39597; http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf; http://www.securityfocus.com/bid/24817
CVE: CVE-2007-3696
Published: 2007-07-11
Description: CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (application hang) via a malformed .EXP database file and (2) cause a denial of service (aaplication crash) via a crafted .EXP database file, which triggers a NULL dereference.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/39596; http://www.eleytt.com/advisories/eleytt_ALLFUSIONDATAMODEL.pdf; http://www.securityfocus.com/bid/24814
CVE: CVE-2007-3697
Published: 2007-07-11
Description: PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36139; http://secunia.com/advisories/26007; http://securityreason.com/securityalert/2881
CVE: CVE-2007-3698
Published: 2007-07-11
Description: The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.
CVSS Score: 7.8 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/249; http://docs.info.apple.com/article.html?artnum=307177; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450
CVE: CVE-2007-3693
Published: 2007-07-11
Description: Cross-site scripting (XSS) vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or HTML via the q parameter to the search function.
CVSS Score: 4.3 (MEDIUM)
References: http://int21.de/cve/CVE-2007-3693-gobi.txt; http://www.securityfocus.com/bid/24880; http://int21.de/cve/CVE-2007-3693-gobi.txt
CVE: CVE-2007-3700
Published: 2007-07-11
Description: Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com.iplanet.services.debug.level property in AMConfig.properties, logs cleartext login passwords, which allows local users to gain privileges by reading /var/opt/SUNWam/debug/amAuth.
CVSS Score: 1.7 (LOW)
References: http://osvdb.org/37249; http://secunia.com/advisories/26030; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101918-1
CVE: CVE-2007-3701
Published: 2007-07-11
Description: TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote attackers to send certain network traffic and avoid detection, as demonstrated by a cmd.exe attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064550.html; http://osvdb.org/35970; http://secunia.com/advisories/26013
CVE: CVE-2007-3702
Published: 2007-07-11
Description: Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archives parameter in a Load action.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38452; http://secunia.com/advisories/26009; http://www.securityfocus.com/bid/24852
CVE: CVE-2007-3703
Published: 2007-07-11
Description: Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChecker) Pro allows remote attackers to execute arbitrary code via a long argument to the Fill method.  NOTE: this is probably a different issue than CVE-2007-2987.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0180.html; http://osvdb.org/37707; http://www.exploit-db.com/exploits/4170
CVE: CVE-2007-3704
Published: 2007-07-11
Description: Entertainment CMS allows remote attackers to bypass authentication and perform certain administrative actions by setting the adminLogged cookie to "Administrator."
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/37908; http://secunia.com/advisories/26016; http://securityreason.com/securityalert/2878
CVE: CVE-2007-3705
Published: 2007-07-11
Description: SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVAR_SUBCAT (txForumID) parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/37140; http://securityreason.com/securityalert/2879; http://www.securityfocus.com/archive/1/471637/100/200/threaded
CVE: CVE-2007-3706
Published: 2007-07-11
Description: The _sanitize_globals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset arbitrary global variables with unspecified impact, as demonstrated by a _SERVER cookie.
CVSS Score: 2.1 (LOW)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html; http://osvdb.org/37905; http://secunia.com/advisories/25991
CVE: CVE-2007-3707
Published: 2007-07-11
Description: Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when enable_query_strings is true, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html; http://osvdb.org/37906; http://secunia.com/advisories/25991
CVE: CVE-2007-3708
Published: 2007-07-11
Description: Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xss_clean function.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html; http://osvdb.org/37907; http://secunia.com/advisories/25991
CVE: CVE-2007-3709
Published: 2007-07-11
Description: CRLF injection vulnerability in the redirect function in url_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in an unspecified parameter, as demonstrated by a Set-Cookie header.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.html; http://osvdb.org/39370; http://securityreason.com/securityalert/2877
CVE: CVE-2007-3710
Published: 2007-07-11
Description: PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36150; http://securityreason.com/securityalert/2876; http://www.securityfocus.com/archive/1/473188/100/0/threaded
CVE: CVE-2007-3711
Published: 2007-07-11
Description: Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid detection by sending certain fragmented packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0210.html; http://osvdb.org/35969; http://secunia.com/advisories/26017
CVE: CVE-2007-3712
Published: 2007-07-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in HiddenChest "is ve Bayi Basvuru Formu" (Yb ve Bayi Babvuru Formu) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36873; http://www.securityfocus.com/bid/24812; http://osvdb.org/36873
CVE: CVE-2007-3713
Published: 2007-07-11
Description: Multiple buffer overflows in Konst CenterICQ 4.9.11 through 4.21 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this might overlap CVE-2007-0160.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/28103; http://www.debian.org/security/2007/dsa-1433; http://www.securityfocus.com/bid/24854
CVE: CVE-2007-3714
Published: 2007-07-11
Description: Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter to the default URI.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this is probably a different issue than CVE-2004-2464.  NOTE: it was later reported that 0.6.21 and earlier is also affected.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38083; http://secunia.com/advisories/26000; http://www.securityfocus.com/archive/1/485490/100/100/threaded
CVE: CVE-2007-3715
Published: 2007-07-11
Description: Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://osvdb.org/37248; http://secunia.com/advisories/26023; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102992-1
CVE: CVE-2007-3716
Published: 2007-07-11
Description: The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://dev2dev.bea.com/pub/advisory/248; http://osvdb.org/36664; http://secunia.com/advisories/26031
CVE: CVE-2006-5271
Published: 2007-07-12
Description: Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/26029; http://www.iss.net/threats/269.html; http://www.osvdb.org/36098
CVE: CVE-2006-5272
Published: 2007-07-12
Description: Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted ping packet.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26029; http://www.iss.net/threats/269.html; http://www.osvdb.org/36099
CVE: CVE-2006-5273
Published: 2007-07-12
Description: Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/26029; http://www.iss.net/threats/269.html; http://www.nessus.org/plugins/index.php?view=single&id=25702
CVE: CVE-2006-5274
Published: 2007-07-12
Description: Integer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 allows remote attackers to cause a denial of service (CMA Framework service crash) and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/26029; http://www.iss.net/threats/269.html; http://www.osvdb.org/36101
CVE: CVE-2007-3509
Published: 2007-07-12
Description: Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.
CVSS Score: 7.5 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=553; http://secunia.com/advisories/26032; http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11a.html
CVE: CVE-2007-3717
Published: 2007-07-12
Description: rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local users to gain privileges by creating files with certain names, possibly containing shell metacharacters or spaces, a similar issue to CVE-2006-0225.
CVSS Score: 6.9 (MEDIUM)
References: http://osvdb.org/36611; http://secunia.com/advisories/26024; http://secunia.com/advisories/26210
CVE: CVE-2007-3718
Published: 2007-07-12
Description: Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact.  NOTE: this issue contains no actionable information, but it was released by a reliable researcher.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38858; http://security-protocols.com/2007/06/12/safari-3-beta-released-on-windows/; http://www.securityfocus.com/bid/24446
CVE: CVE-2007-3719
Published: 2007-07-12
Description: The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/37127; http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf; http://osvdb.org/37127
CVE: CVE-2007-3720
Published: 2007-07-12
Description: The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/37126; http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf; http://osvdb.org/37126
CVE: CVE-2007-3721
Published: 2007-07-12
Description: The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/39598; http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf; http://osvdb.org/39598
CVE: CVE-2007-3722
Published: 2007-07-12
Description: The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption) by performing voluntary nanosecond sleeps that result in the process not being active during a clock interrupt, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/39599; http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf; http://osvdb.org/39599
CVE: CVE-2007-3723
Published: 2007-07-12
Description: The process scheduler in the Sun Solaris kernel does not make use of the process statistics kept by the kernel and performs scheduling based upon CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/36616; http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf; http://osvdb.org/36616
CVE: CVE-2007-3724
Published: 2007-07-12
Description: The process scheduler in the Microsoft Windows XP kernel does not make use of the process statistics kept by the kernel, performs scheduling based on CPU billing gathered from periodic process sampling ticks, and gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service (CPU consumption), as described in "Secretly Monopolizing the CPU Without Superuser Privileges."
CVSS Score: 2.1 (LOW)
References: http://osvdb.org/36938; http://www.cs.huji.ac.il/~dants/papers/Cheat07Security.pdf; http://osvdb.org/36938
CVE: CVE-2007-3725
Published: 2007-07-12
Description: The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.
CVSS Score: 4.3 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=307562; http://kolab.org/security/kolab-vendor-notice-16.txt; http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
CVE: CVE-2007-3726
Published: 2007-07-12
Description: Integer signedness error in the SET_VALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive that causes a negative signed number to be cast to a large unsigned number.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/39603; http://securityreason.com/securityalert/2880; http://www.securityfocus.com/archive/1/473371/100/0/threaded
CVE: CVE-2007-3727
Published: 2007-07-12
Description: Multiple unspecified vulnerabilities in Webmatic before 2.7 have unknown impact and attack vectors, related to the "administration area."
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36731; http://secunia.com/advisories/26019; http://www.securityfocus.com/bid/24879
CVE: CVE-2007-3728
Published: 2007-07-12
Description: Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICK_CHANGE" notifications.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/36730; http://secunia.com/advisories/25939; http://silcnet.org/docs/changelog/changes.txt
CVE: CVE-2007-3729
Published: 2007-07-12
Description: The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid POP usernames.
CVSS Score: 5.0 (MEDIUM)
References: http://groups.google.com/group/comp.os.vms/browse_thread/thread/a5f68773805f862d/8a42e91fe1e9cd36; http://osvdb.org/37809; http://secunia.com/advisories/25882
CVE: CVE-2007-3730
Published: 2007-07-12
Description: The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to avoid identification.
CVSS Score: 5.0 (MEDIUM)
References: http://groups.google.com/group/comp.os.vms/browse_thread/thread/a5f68773805f862d/8a42e91fe1e9cd36; http://osvdb.org/37810; http://secunia.com/advisories/25882
CVE: CVE-2007-3641
Published: 2007-07-14
Description: archive_read_support_format_tar.c in libarchive before 2.2.4 does not properly compute the length of a certain buffer when processing a malformed pax extension header, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PAX or (2) TAR archive that triggers a buffer overflow.
CVSS Score: 9.3 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924; http://osvdb.org/38092; http://people.freebsd.org/~kientzle/libarchive/
CVE: CVE-2007-3644
Published: 2007-07-14
Description: archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of service (infinite loop) via (1) an end-of-file condition within a pax extension header or (2) a malformed pax extension header in an (a) PAX or a (b) TAR archive.
CVSS Score: 4.3 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=432924; http://osvdb.org/38093; http://osvdb.org/38094
CVE: CVE-2006-5277
Published: 2007-07-15
Description: Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/26043; http://securitytracker.com/id?1018369; http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml
CVE: CVE-2007-2392
Published: 2007-07-15
Description: Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305947; http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html; http://osvdb.org/36136
CVE: CVE-2007-2393
Published: 2007-07-15
Description: The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305947; http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html; http://osvdb.org/36135
CVE: CVE-2007-2394
Published: 2007-07-15
Description: Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305947; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556; http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
CVE: CVE-2007-2396
Published: 2007-07-15
Description: The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets.
CVSS Score: 9.3 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305947; http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html; http://osvdb.org/36133