rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2822 
TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2823 
Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width.  NOTE: some of the details were obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2824 
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2825 
Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) links and (2) images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2826 
PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[basedir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2827 
Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2828 
Cross-site request forgery (CSRF) vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T21:00:00.000Z
CVE-2007-2829 
The 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system hang) via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T01:29:00.000Z
CVE-2007-2830 
The ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T01:29:00.000Z
CVE-2007-2831 
Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system crash), possibly obtain kernel memory contents, and possibly execute arbitrary code via a large negative array index value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T01:29:00.000Z
CVE-2007-2832 
Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T01:29:00.000Z
CVE-2007-2833 
Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrated via a GIF image in vm mode, related to image size calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-21T20:00:00.000Z
CVE-2007-2834 
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-18T21:00:00.000Z
CVE-2007-2835 
Multiple stack-based buffer overflows in (1) CCE_pinyin.c and (2) xl_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and other applications, allow local users to gain privileges via a long HOME environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-03T01:00:00.000Z
CVE-2007-2836 
Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched against an insufficiently restrictive regular expression before it is used to construct a filename that is marked for deletion at logout.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-02T19:00:00.000Z
CVE-2007-2837 
The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-03T18:00:00.000Z
CVE-2007-2838 
The populate_conns function in src/populate_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-03T01:00:00.000Z
CVE-2007-2839 
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-05T21:00:00.000Z
CVE-2007-2843 
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2844 
PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2845 
Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2846 
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2847 
Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameter, different vectors than CVE-2007-0840 and CVE-2007-2812.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2848 
Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control (shcmb80.ocx) in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2849 
KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2850 
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2851 
A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers to overwrite arbitrary files via the WriteDataToFile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T18:00:00.000Z
CVE-2007-2852 
Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) delete/disinfect or (2) rename operations via a crafted directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2853 
The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2854 
Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) style or (2) langue parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2855 
Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2856.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2856 
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2857 
PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP code via a URL in the parser_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2858 
SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2859 
Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the path_simpgb parameter to (1) guestbook.php, (2) search.php, (3) mailer.php, (4) avatars.php, (5) ccode.php, (6) comments.php, (7) emoticons.php, (8) gbdownload.php, and possibly other PHP scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2860 
user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2861 
Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News (SAXON) 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) news.php, (2) preview.php, or (3) archive-display.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2862 
Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQL commands via an unspecified parameter to cart.inc.php and certain other files in an include directory, related to missing sanitization of the $option variable and possibly cookie modification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T19:00:00.000Z
CVE-2007-2863 
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a long filename in a .CAB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-2864 
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T21:00:00.000Z
CVE-2007-2865 
Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the server parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-25T18:00:00.000Z
CVE-2007-2866 
Multiple SQL injection vulnerabilities in modules/admin/modules/gallery.php in PHPEcho CMS 2.0-rc1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter and possibly other parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-25T18:00:00.000Z
CVE-2007-2867 
Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) via vectors related to dangling pointers, heap corruption, signed/unsigned, and other issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T00:00:00.000Z
CVE-2007-2868 
Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T00:00:00.000Z
CVE-2007-2869 
The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a large number of characters in a submitted form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T00:00:00.000Z
CVE-2007-2870 
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the addEventListener method to add an event listener for a site, which is executed in the context of that site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T00:00:00.000Z
CVE-2007-2871 
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the browser's content pane.  NOTE: this issue can be leveraged for phishing and other attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T00:00:00.000Z
CVE-2007-2872 
Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-04T17:00:00.000Z
CVE-2007-2873 
SpamAssassin 3.1.x, 3.2.0, and 3.2.1 before 20070611, when running as root in unusual configurations using vpopmail or virtual users, allows local users to cause a denial of service (corrupt arbitrary files) via a symlink attack on a file that is used by spamd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T23:00:00.000Z
CVE-2007-2874 
Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to execute arbitrary code via malformed frames on a WPA2 network.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-27T21:00:00.000Z
CVE-2007-2875 
Integer underflow in the cpuset_tasks_read function in the Linux kernel before 2.6.20.13, and 2.6.21.x before 2.6.21.4, when the cpuset filesystem is mounted, allows local users to obtain kernel memory contents by using a large offset when reading the /dev/cpuset/tasks file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T22:00:00.000Z
CVE-2007-2876 
The sctp_new function in (1) ip_conntrack_proto_sctp.c and (2) nf_conntrack_proto_sctp.c in Netfilter in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, allows remote attackers to cause a denial of service by causing certain invalid states that trigger a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T23:00:00.000Z
CVE-2007-2877 
Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) before 8.5a6 allows local users to gain privileges via long registry key paths.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-29T20:00:00.000Z
CVE-2007-2878 
The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel_dirent struct and cause a denial of service (system crash) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-29T20:00:00.000Z
CVE-2007-2879 
Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script or HTML via the month parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-29T20:00:00.000Z
CVE-2007-2880 
Multiple cross-site scripting (XSS) vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) Room_name parameter to room/info_book.asp or the (2) curYear parameter to room/week.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-29T20:00:00.000Z
CVE-2007-2881 
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-29T20:00:00.000Z
CVE-2007-2882 
Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remote attackers to cause a denial of service (crash) via certain Access Control List (acl) packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2883 
Credant Mobile Guardian Shield for Windows 5.2.1.105 and earlier stores account names and passwords in plaintext in memory, which allows local users to obtain sensitive information by (1) reading the paging file or (2) dumping and searching the memory image.  NOTE: This issue crosses privilege boundaries because the product is intended to protect the data on a stolen computer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2884 
Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via a Visual Basic Project (vbp) file with a long (1) Description or (2) Company Name (VersionCompanyName) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2885 
The NotSafe function in the MSVDTDatabaseDesigner7 ActiveX control in VDT70.DLL in Microsoft Visual Database Tools (MSVDT) Database Designer 7.0 allows remote attackers to cause a denial of service (Internet Explorer 6 crash) via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2886 
Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service (card hang) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2887 
Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2888 
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761.  NOTE: some details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z