rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-1530 
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.  NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-14T10:00:00.000Z
CVE-2006-1531 
Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML.  NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-14T10:00:00.000Z
CVE-2006-1532 
Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1533 
SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1534 
Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via (1) the user_email parameter in (a) lostpass.php, and the (2) user_email and (3) user_username parameters in (b) sub.php and (c) unsub.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1535 
Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1536 
Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) motclef and (2) nbr_line_view parameters in (a) carnet.php, and the (3) id_contact parameter in (b) contact_view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1537 
Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) includes/index.php, (2) tests/add_duration_test.php, (3) tests/all_tests.php, (4) groups.php, (5) nonusers.php, (6) includes/settings.php, (7) includes/init.php, (8) includes/settings.php.orig, (9) includes/js/admin.php, (10) includes/js/edit_entry.php, (11) includes/js/edit_layer.php, (12) includes/js/export_import.php, (13) includes/js/popups.php, (14) includes/js/pref.php, or (15) includes/menu/index.php, which reveal the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1538 
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1539 
Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another user launches tetris-bsd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1540 
MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an Excel .xlw document, which triggers an access violation in excel.exe; (3) a Word document, which triggers an access violation in mso.dll in winword.exe; and (4) a PowerPoint document, which triggers an access violation in powerpnt.txt.  NOTE: after the initial disclosure, this issue was demonstrated by triggering an integer overflow using an inconsistent size for a Unicode "Sheet Name" string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1541 
SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1542 
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function.  NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1543 
Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1544 
Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1545 
Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T11:00:00.000Z
CVE-2006-1546 
Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T22:00:00.000Z
CVE-2006-1547 
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T22:00:00.000Z
CVE-2006-1548 
Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T22:00:00.000Z
CVE-2006-1549 
PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function.  NOTE: it has been reported by a reliable third party that some later versions are also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-10T22:00:00.000Z
CVE-2006-1550 
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-30T23:00:00.000Z
CVE-2006-1551 
Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-13T22:00:00.000Z
CVE-2006-1552 
Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1553 
SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1554 
Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1555 
VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1556 
Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CatName, (2) CaricatierID, or (3) CatID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1557 
Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1558 
Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1559 
SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1560 
Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly (1) id and (2) topicid, in (a) browse.php, (b) category.php, (c) gallery.php, (d) poll.php, and (e) possibly other unspecified scripts.  NOTE: portions of the description details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1561 
SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1562 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1563 
Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1564 
Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the (1) mod_authz_svn.so and (2) mod_dav_svn.so modules, which might allow local users to gain privileges by installing malicious libraries in that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1565 
Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the LinuxGpib.so module, which might allow local users to gain privileges by installing malicious libraries in that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1566 
Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the tunepimp.so module, which might allow local users to gain privileges by installing malicious libraries in that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-31T11:00:00.000Z
CVE-2006-1567 
Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchField parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1568 
Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) email, (2) location, or (3) website parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1569 
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters to (a) login.php or (b) register.php; or (3) u parameter to (c) profile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1570 
Cross-site scripting (XSS) vulnerability in Esqlanelapse 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1571 
Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1572 
SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1573 
PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter (part of the $page_menu variable).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1574 
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-01T00:00:00.000Z
CVE-2006-1575 
Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1576 
Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1577 
Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1578 
Multiple SQL injection vulnerabilities in Keystone Digital Library Suite (DLS) 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subject_type_id parameter in (1) the index page and (2) the search module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1579 
SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the limite parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1580 
Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in query.jsp and (2) entryId parameter in edit.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1581 
Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the _path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1582 
Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the _path parameter.  NOTE: this might be resultant from the directory traversal issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1583 
Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter.  NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1584 
Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads.  NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1585 
Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1586 
SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-02T21:00:00.000Z
CVE-2006-1587 
NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T10:00:00.000Z
CVE-2006-1588 
The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T10:00:00.000Z
CVE-2006-1589 
The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T10:00:00.000Z
CVE-2006-1590 
Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the (a) back parameter to base_graph_main.php, (b) netmask parameter to base_stat_ipaddr.php, or (c) submit parameter to base_qry_alert.php within BASE, or (d) query string to acid_main.php in ACID, which causes the request URI ($_SERVER['REQUEST_URI']) to be inserted into a refresh operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T10:00:00.000Z
CVE-2006-1591 
Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T10:00:00.000Z