deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-4082
Published: 2008-09-15
Description: SQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via an arbitrary field in a search action to index.php.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/31661; http://securityreason.com/securityalert/4251; http://www.securityfocus.com/bid/30944
CVE: CVE-2008-4083
Published: 2008-09-15
Description: Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/31661; http://securityreason.com/securityalert/4251; http://www.securityfocus.com/bid/30944
CVE: CVE-2008-4084
Published: 2008-09-15
Description: SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/31682; http://securityreason.com/securityalert/4254; http://www.securityfocus.com/bid/30943
CVE: CVE-2008-4085
Published: 2008-09-15
Description: plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on (1) cut.$$, (2) head.$$, (3) awk.$$, and (4) ps.$$ temporary files in /tmp/.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496381; http://dev.gentoo.org/~rbu/security/debiantemp/plait; http://secunia.com/advisories/31617
CVE: CVE-2008-4086
Published: 2008-09-15
Description: SQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31703; http://securityreason.com/securityalert/4253; http://www.securityfocus.com/bid/30960
CVE: CVE-2008-4087
Published: 2008-09-15
Description: Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project (aka bcproj) file with a long string in a certain instruments title field.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/31660; http://securityreason.com/securityalert/4259; http://www.securityfocus.com/bid/30938
CVE: CVE-2008-4088
Published: 2008-09-15
Description: SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4255; http://www.securityfocus.com/bid/30942; http://www.securityfocus.com/bid/31112
CVE: CVE-2008-4089
Published: 2008-09-15
Description: Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/30942; http://www.securityfocus.com/bid/31112; http://www.securityfocus.com/bid/31114
CVE: CVE-2008-4090
Published: 2008-09-15
Description: SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31699; http://securityreason.com/securityalert/4260; http://www.securityfocus.com/bid/30961
CVE: CVE-2008-4091
Published: 2008-09-15
Description: SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/31629; http://www.securityfocus.com/bid/30941; https://exchange.xforce.ibmcloud.com/vulnerabilities/45185
CVE: CVE-2008-4092
Published: 2008-09-15
Description: SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4261; http://websecurity.com.ua/2398/; http://www.securityfocus.com/bid/30959
CVE: CVE-2008-4093
Published: 2008-09-15
Description: SQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://securityreason.com/securityalert/4256; http://www.securityfocus.com/bid/30868; https://exchange.xforce.ibmcloud.com/vulnerabilities/44758
CVE: CVE-2008-4095
Published: 2008-09-16
Description: Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vectors, different vulnerabilities than CVE-2007-6713.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/31925; http://www.flip4mac.com/downloads/wmv_components/flip4mac-wmv-release-notes.pdf; http://www.securityfocus.com/bid/31505
CVE: CVE-2008-2437
Published: 2008-09-16
Description: Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, OfficeScan 8.0 and 8.0 SP1, and Client Server Messaging Security 3.6 allows remote attackers to execute arbitrary code via an HTTP request containing a long ComputerName parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/31342; http://secunia.com/secunia_research/2008-35/; http://securityreason.com/securityalert/4263
CVE: CVE-2008-4110
Published: 2008-09-16
Description: Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method.  NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4262; http://www.securityfocus.com/archive/1/496232/100/0/threaded; http://www.securityfocus.com/bid/31129
CVE: CVE-2008-2305
Published: 2008-09-16
Description: Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to execute arbitrary code via a document containing a crafted font, related to "PostScript font names."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020873
CVE: CVE-2008-2312
Published: 2008-09-16
Description: Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows local users to obtain sensitive information by reading this file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020881
CVE: CVE-2008-2329
Published: 2008-09-16
Description: Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate user names via wildcard characters in the Login Window.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020874
CVE: CVE-2008-2330
Published: 2008-09-16
Description: slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output file into which the server password will be written by an OpenLDAP system administrator, related to the mkfifo function, aka an "insecure file operation issue."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020874
CVE: CVE-2008-2331
Published: 2008-09-16
Description: Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lock operation that modifies Sharing & Permissions in a filesystem, which might allow local users to leverage weak permissions that were not intended by an administrator.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020875
CVE: CVE-2008-2332
Published: 2008-09-16
Description: ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted TIFF image.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882
CVE: CVE-2008-3608
Published: 2008-09-16
Description: ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a crafted JPEG image with an embedded ICC profile.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html; http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882
CVE: CVE-2008-3609
Published: 2008-09-16
Description: The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purging) of a vnode, which might allow local users to bypass the intended read or write permissions of a file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://www.securityfocus.com/bid/31189
CVE: CVE-2008-3610
Published: 2008-09-16
Description: Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows attackers to bypass password authentication and login to any account via multiple attempts to login to the blank-password account, followed by selection of an arbitrary account from the user list.
CVSS Score: 7.6 (HIGH)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020878
CVE: CVE-2008-3611
Published: 2008-09-16
Description: Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt that is denied by policy, which allows opportunistic, physically proximate attackers to bypass authentication and change this user's password by later entering an acceptable new password on the same login screen.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-287
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020878
CVE: CVE-2008-3613
Published: 2008-09-16
Description: Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving a search for a remote disk on the local network.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020875
CVE: CVE-2008-3616
Published: 2008-09-16
Description: Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-dependent attackers to cause a denial of service (application crash) or execute arbitrary code via vectors associated with "passing untrusted input" to unspecified API functions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020880
CVE: CVE-2008-3617
Published: 2008-09-16
Description: Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewer, displays additional input characters beyond the maximum password length, which might make it easier for attackers to guess passwords that the user believed were longer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://securitytracker.com/id?1020882; http://www.securityfocus.com/bid/31189
CVE: CVE-2008-3618
Published: 2008-09-16
Description: The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that the complete contents of their own home directories are shared for their own use, which might allow attackers to leverage other vulnerabilities and access files for which sharing was unintended.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://securitytracker.com/id?1020883; http://www.kb.cert.org/vuls/id/126787
CVE: CVE-2008-3619
Published: 2008-09-16
Description: Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allows local users to obtain sensitive information by reading these files.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020884
CVE: CVE-2008-3621
Published: 2008-09-16
Description: VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving H.264 encoded media.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020885
CVE: CVE-2008-3622
Published: 2008-09-16
Description: Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message that reaches a mailing-list archive, aka "persistent JavaScript injection."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html; http://secunia.com/advisories/31882; http://securitytracker.com/id?1020886
CVE: CVE-2008-3950
Published: 2008-09-16
Description: Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://securityreason.com/securityalert/4264; http://www.coresecurity.com/content/iphone-safari-javascript-alert-denial-of-service; http://www.securityfocus.com/archive/1/496321/100/0/threaded
CVE: CVE-2008-4111
Published: 2008-09-16
Description: Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/31892; http://secunia.com/advisories/32296; http://www-01.ibm.com/support/docview.wss?uid=swg27006876
CVE: CVE-2008-4112
Published: 2008-09-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3195.  Reason: This candidate is a duplicate of CVE-2008-3195.  Notes: All CVE users should reference CVE-2008-3195 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-4113
Published: 2008-09-16
Description: The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows local users to obtain sensitive information via a crafted SCTP_HMAC_IDENT IOCTL request involving the sctp_getsockopt function.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git%3Ba=commit%3Bh=d97240552cd98c4b07322f30f66fd9c3ba4171de; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00010.html; http://secunia.com/advisories/32190
CVE: CVE-2008-4114
Published: 2008-09-16
Description: srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via an SMB WRITE_ANDX packet with an offset that is inconsistent with the packet size, related to "insufficiently validating the buffer size," as demonstrated by a request to the \PIPE\lsarpc named pipe, aka "SMB Validation Denial of Service Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/31883; http://www.reversemode.com/index.php?option=com_content&task=view&id=54&Itemid=1; http://www.securityfocus.com/archive/1/496354/100/0/threaded
CVE: CVE-2008-4115
Published: 2008-09-16
Description: TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/4267; https://exchange.xforce.ibmcloud.com/vulnerabilities/45103; https://www.exploit-db.com/exploits/6451
CVE: CVE-2008-1093
Published: 2008-09-18
Description: Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/31896; http://securityreason.com/securityalert/4268; http://www.kb.cert.org/vuls/id/837092
CVE: CVE-2008-2468
Published: 2008-09-18
Description: Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://community.landesk.com/support/docs/DOC-3276; http://dvlabs.tippingpoint.com/advisory/TPTI-08-06; http://secunia.com/advisories/31888
CVE: CVE-2008-3195
Published: 2008-09-18
Description: Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31849; http://secunia.com/advisories/31964; http://securityreason.com/securityalert/4265
CVE: CVE-2008-3961
Published: 2008-09-18
Description: Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a crafted AI file.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/31902; http://www.adobe.com/support/security/advisories/apsa08-07.html; http://www.securityfocus.com/bid/31208
CVE: CVE-2008-4096
Published: 2008-09-18
Description: libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: http://fd.the-wildcat.de/pma_e36a091q11.php; http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://osvdb.org/48196
CVE: CVE-2008-4097
Published: 2008-09-18
Description: MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html; http://secunia.com/advisories/32759
CVE: CVE-2008-4098
Published: 2008-09-18
Description: MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25; http://bugs.mysql.com/bug.php?id=32167; http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
CVE: CVE-2008-4109
Published: 2008-09-18
Description: A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=498678; http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html; http://secunia.com/advisories/31885
CVE: CVE-2008-4116
Published: 2008-09-18
Description: Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long type attribute in a quicktime tag (1) on a web page or embedded in a (2) .mp4 or (3) .mov file, possibly related to the Check_stack_cookie function and an off-by-one error that leads to a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/4270; http://www.securityfocus.com/bid/31212; https://exchange.xforce.ibmcloud.com/vulnerabilities/45311