deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-6267
Published: 2007-12-07
Description: Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://secunia.com/advisories/27935; http://support.citrix.com/article/CTX115281; http://www.securityfocus.com/bid/26705
CVE: CVE-2007-6268
Published: 2007-12-07
Description: Directory traversal vulnerability in pages/default.aspx in Absolute News Manager.NET 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1351&w=2; http://osvdb.org/40575; http://secunia.com/advisories/27923
CVE: CVE-2007-6269
Published: 2007-12-07
Description: Multiple SQL injection vulnerabilities in xlaabsolutenm.aspx in Absolute News Manager.NET 5.1 allow remote attackers to execute arbitrary SQL commands via the (1) z, (2) pz, (3) ord, and (4) sort parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1351&w=2; http://osvdb.org/40576; http://secunia.com/advisories/27923
CVE: CVE-2007-6270
Published: 2007-12-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in Absolute News Manager.NET 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) rmore parameter to xlaabsolutenm.aspx and the (2) template parameter to pages/default.aspx.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1351&w=2; http://osvdb.org/40577; http://osvdb.org/40578
CVE: CVE-2007-6271
Published: 2007-12-07
Description: Absolute News Manager.NET 5.1 allows remote attackers to obtain sensitive information via a direct request to getpath.aspx, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/3421; http://www.procheckup.com/Vulnerability_PR07-39.php; http://www.securityfocus.com/archive/1/484560/100/0/threaded
CVE: CVE-2007-6272
Published: 2007-12-07
Description: Multiple SQL injection vulnerabilities in index.php in Joomla! 1.5 RC3 allow remote attackers to execute arbitrary SQL commands via (1) the view parameter to the com_content component, (2) the task parameter to the com_search component, or (3) the option parameter in a search action to the com_search component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3422; http://www.securityfocus.com/archive/1/484603/100/0/threaded; http://www.securityfocus.com/bid/26707
CVE: CVE-2007-6273
Published: 2007-12-07
Description: Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag.  NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries.
CVSS Score: 9.3 (HIGH)
CWE: CWE-134
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3064&w=2; http://secunia.com/advisories/27917; http://www.sec-consult.com/305.html
CVE: CVE-2007-6274
Published: 2007-12-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in modules/ecal/display.php in the Event Calendar in bcoos 1.0.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) day or (2) year parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lostmon.blogspot.com/2007/11/bcoops-sql-injection-and-cross-site.html; http://secunia.com/advisories/26945; http://www.securityfocus.com/bid/26629
CVE: CVE-2007-6275
Published: 2007-12-07
Description: SQL injection vulnerability in modules/adresses/ratefile.php in bcoos 1.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter, a different vector than CVE-2007-6266.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://lostmon.blogspot.com/2007/11/bcoops-adressesratefilephp-lid-variable.html; http://secunia.com/advisories/26945; http://lostmon.blogspot.com/2007/11/bcoops-adressesratefilephp-lid-variable.html
CVE: CVE-2007-6276
Published: 2007-12-07
Description: The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html; http://secunia.com/advisories/27938; http://secunia.com/advisories/30802
CVE: CVE-2007-6277
Published: 2007-12-07
Description: Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow.  NOTE: some of these issues may overlap CVE-2007-4619.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://research.eeye.com/html/advisories/published/AD20071115.html; http://secunia.com/advisories/28548; http://securityreason.com/securityalert/3423
CVE: CVE-2007-6278
Published: 2007-12-07
Description: Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allows user-assisted remote attackers to force a client to download arbitrary files via the MIME-Type URL flag (-->) for the FLAC image file in a crafted .FLAC file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20, CWE-264
References: http://research.eeye.com/html/advisories/published/AD20071115.html; http://securityreason.com/securityalert/3423; http://www.kb.cert.org/vuls/id/544656
CVE: CVE-2007-6279
Published: 2007-12-07
Description: Multiple double free vulnerabilities in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via malformed (1) Seektable values or (2) Seektable Data Offsets in a .FLAC file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://research.eeye.com/html/advisories/published/AD20071115.html; http://securityreason.com/securityalert/3423; http://www.kb.cert.org/vuls/id/544656
CVE: CVE-2007-6287
Published: 2007-12-10
Description: Cross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frm_emessage parameter, a different vector than CVE-2006-6649.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27893; http://www.securityfocus.com/bid/26751; https://exchange.xforce.ibmcloud.com/vulnerabilities/38926
CVE: CVE-2007-6288
Published: 2007-12-10
Description: Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/27940; http://sourceforge.net/project/shownotes.php?release_id=559646&group_id=159398; http://www.securityfocus.com/bid/26760
CVE: CVE-2007-6289
Published: 2007-12-10
Description: Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SERWEB[configdir] parameter to load_lang.php, (2) _SERWEB[functionsdir] parameter to main_prepend.php, and the (3) _PHPLIB[libdir] parameter to load_phplib.php, different vectors than CVE-2007-3359 and CVE-2007-3358.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/26747; https://exchange.xforce.ibmcloud.com/vulnerabilities/38906; https://www.exploit-db.com/exploits/4696
CVE: CVE-2007-6290
Published: 2007-12-10
Description: Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) mod and (2) js parameters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/39220; http://www.securityfocus.com/bid/26747; https://exchange.xforce.ibmcloud.com/vulnerabilities/38907
CVE: CVE-2007-6291
Published: 2007-12-10
Description: SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058896.html; http://secunia.com/advisories/27958; http://www.securityfocus.com/bid/26754
CVE: CVE-2007-6292
Published: 2007-12-10
Description: SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/27956; http://www.securityfocus.com/bid/26746; https://exchange.xforce.ibmcloud.com/vulnerabilities/38905
CVE: CVE-2007-6293
Published: 2007-12-10
Description: Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC commands."
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/40946; http://secunia.com/advisories/27961; http://www-1.ibm.com/support/docview.wss?uid=isg1MB02223
CVE: CVE-2007-6294
Published: 2007-12-10
Description: Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC commands."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/41623; http://secunia.com/advisories/27970; http://www.securityfocus.com/bid/26769
CVE: CVE-2007-6295
Published: 2007-12-10
Description: Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/39258; http://secunia.com/advisories/27941; http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249
CVE: CVE-2007-6296
Published: 2007-12-10
Description: PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://securityreason.com/securityalert/3426; http://www.securityfocus.com/archive/1/484575/100/0/threaded; http://securityreason.com/securityalert/3426
CVE: CVE-2007-6297
Published: 2007-12-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMIT parameter to chat/deluser.php3, the (2) Link parameter to chat/edituser.php3, or the (3) LastCheck or (4) B parameter to chat/users_popupL.php3.  NOTE: the FontName vectors for start_page.css.php3 and style.css.php3 are already covered by CVE-2005-1619. The medium vectors for start_page.css.php3 (start_page.css.php) and style.css.php3 (style.css.php), and the From vector for users_popupL.php3 (users_popupL.php), are already covered by CVE-2005-3991.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3426; http://www.securityfocus.com/archive/1/484575/100/0/threaded; http://www.securityfocus.com/bid/26698
CVE: CVE-2007-6298
Published: 2007-12-10
Description: Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/198163; http://osvdb.org/39053; http://secunia.com/advisories/27953
CVE: CVE-2007-6299
Published: 2007-12-10
Description: Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomy_select_nodes function, as demonstrated by the (1) taxonomy_menu, (2) ajaxLoader, and (3) ubrowser contributed modules.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-89
References: http://drupal.org/node/198162; http://secunia.com/advisories/27932; http://secunia.com/advisories/27951
CVE: CVE-2007-6300
Published: 2007-12-10
Description: Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/40861; http://secunia.com/advisories/27918; http://www.fusionnews.net/forums/viewtopic.php?f=1&t=480
CVE: CVE-2007-6301
Published: 2007-12-10
Description: Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/27966; http://securityreason.com/securityalert/3427; http://www.securityfocus.com/archive/1/484680/100/0/threaded
CVE: CVE-2007-5968
Published: 2007-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2007-6313.  Reason: this candidate's description and references were inconsistent and described unrelated, non-security issues.  The original intended issue is covered by CVE-2007-6313.  Notes: All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-5969
Published: 2007-12-10
Description: MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://bugs.mysql.com/32111; http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html; http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51.html
CVE: CVE-2007-5970
Published: 2007-12-10
Description: MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
CVSS Score: 5.8 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=32091; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html; http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html
CVE: CVE-2007-6302
Published: 2007-12-10
Description: Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/27974; http://www.messagingarchitects.com/en/support/mplusnetmail/docs/readme.pdf; http://www.securityfocus.com/archive/1/484843/100/0/threaded
CVE: CVE-2007-6303
Published: 2007-12-10
Description: MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.
CVSS Score: 3.5 (LOW)
References: http://bugs.mysql.com/bug.php?id=29908; http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html
CVE: CVE-2007-6304
Published: 2007-12-10
Description: The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.mysql.com/bug.php?id=29801; http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html; http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html
CVE: CVE-2007-6305
Published: 2007-12-10
Description: Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands."
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119, CWE-264
References: http://secunia.com/advisories/27961; http://www-1.ibm.com/support/docview.wss?uid=isg1MB02226; http://www.securitytracker.com/id?1019062
CVE: CVE-2007-6205
Published: 2007-12-11
Description: Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a link in an RSS feed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.s9y.org/archives/187-Serendipity-1.2.1-released.html; http://osvdb.org/39143; http://secunia.com/advisories/28012
CVE: CVE-2007-6306
Published: 2007-12-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680; http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662; http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662
CVE: CVE-2007-6307
Published: 2007-12-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28002; http://securityreason.com/securityalert/3431; http://www.securityfocus.com/archive/1/484727/100/0/threaded
CVE: CVE-2007-6308
Published: 2007-12-11
Description: Cross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dsas.blog.klab.org/archives/51149337.html; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/39114
CVE: CVE-2007-6309
Published: 2007-12-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the galleryID parameter in a usergallery upload action; or the (2) upID, (3) tag, (4) month, (5) userID, or (6) year parameter in a calendar announce action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28006; http://securityreason.com/securityalert/3429; http://www.securityfocus.com/archive/1/484795/100/0/threaded
CVE: CVE-2007-6310
Published: 2007-12-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php, and (3) the topic parameter to modules/feed/feed.php (aka modules/feed.php).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28045; http://securityreason.com/securityalert/3436; http://sourceforge.net/forum/forum.php?forum_id=762931
CVE: CVE-2007-6311
Published: 2007-12-11
Description: SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows remote attackers to execute arbitrary SQL commands via the nav_ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/28045; http://securityreason.com/securityalert/3436; http://sourceforge.net/forum/forum.php?forum_id=762931
CVE: CVE-2007-6312
Published: 2007-12-11
Description: Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28019; http://securityreason.com/securityalert/3432; http://www.liquidmatrix.org/blog/2007/12/10/advisory-websense-xss-vulnerability/
CVE: CVE-2007-0064
Published: 2007-12-12
Description: Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28034; http://www.kb.cert.org/vuls/id/319385; http://www.securityfocus.com/archive/1/485268/100/0/threaded
CVE: CVE-2007-3039
Published: 2007-12-12
Description: Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional SP4, and Windows XP SP2 allows attackers to execute arbitrary code via a long string in an opnum 0x06 RPC call to port 2103.  NOTE: this is remotely exploitable on Windows 2000 Server.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28011; http://secunia.com/advisories/28051; http://www.securityfocus.com/archive/1/484891/100/0/threaded
CVE: CVE-2007-3895
Published: 2007-12-12
Description: Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/28010; http://www.iss.net/threats/280.html; http://www.kb.cert.org/vuls/id/321233
CVE: CVE-2007-3901
Published: 2007-12-12
Description: Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=632; http://secunia.com/advisories/28010; http://www.iss.net/threats/280.html
CVE: CVE-2007-3902
Published: 2007-12-12
Description: Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189, CWE-399
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=631; http://secunia.com/advisories/28036; http://securitytracker.com/id?1019078