rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-1393 
Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T23:00:00.000Z
CVE-2006-1394 
Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T23:00:00.000Z
CVE-2006-1395 
SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T23:00:00.000Z
CVE-2006-1396 
Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T23:00:00.000Z
CVE-2006-1397 
Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1398 
Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1399 
Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1400 
Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1401 
Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) allwords or (2) oneword parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1402 
Buffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1) cause a denial of service via a long nickname or teamname to the SV_SetupUserInfo function or (2) execute arbitrary code via a long string sent when joining a match or a long chat message to the SV_BroadcastPrintf function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1403 
Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1404 
Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file or (2) function parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1405 
Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1406 
Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtuser or (2) txtpassword parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1407 
Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1408 
Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via (1) a packet with no data or (2) a large packet, which prevents Vavoom from discarding the packet from the socket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1409 
Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (application crash) via an invalid comprLength value in a compressed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1410 
Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1411 
Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1412 
TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T11:00:00.000Z
CVE-2006-1413 
Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) users/users_search.asp, or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1414 
Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, (3) message, or (4) dayprune parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1415 
Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1416 
Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1417 
Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1418 
Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1419 
SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1420 
SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1421 
Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) acname or (2) contentid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1422 
SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the event_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1423 
SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1425 
Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1426 
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1427 
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1428 
Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1429 
Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rtn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T20:00:00.000Z
CVE-2006-1430 
Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php, (2) sharedPlanID parameter to shared_order.php, (3) plan_id parameter to customers/server_management.php, and (4) email field to customers/forgotpass.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T21:00:00.000Z
CVE-2006-1431 
Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded (1) srchfor and (2) srchby parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T22:00:00.000Z
CVE-2006-1432 
fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T22:00:00.000Z
CVE-2006-1433 
Annuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct request to include/lang-en.php, which reveals the full installation path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T14:00:00.000Z
CVE-2006-1434 
Cross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows remote attackers to inject arbitrary web script or HTML via the Comment Field (COMMENTAIRE parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T14:00:00.000Z
CVE-2006-1435 
Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field (message parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T14:00:00.000Z
CVE-2006-1436 
Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-15T23:00:00.000Z
CVE-2006-1437 
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-15T23:00:00.000Z
CVE-2006-1438 
Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword_list parameter to (a) index.php; (2) title, (3) article, (4) author, and (5) keywords parameters to (b) submit_article.php; and (6) Question, (7) Name, and (8) Email parameters to (c) submit_question.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-03T14:00:00.000Z
CVE-2006-1439 
NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1440 
BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1441 
Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1442 
The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1443 
Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1444 
CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1445 
Buffer overflow in the FTP server (FTPServer) in Apple Mac OS X 10.3.9 and 10.4.6 allows remote authenticated users to execute arbitrary code via vectors related to "FTP server path name handling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1446 
Keychain in Apple Mac OS X 10.3.9 and 10.4.6 might allow an application to bypass a locked Keychain by first obtaining a reference to the Keychain when it is unlocked, then reusing that reference after the Keychain has been locked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1447 
LaunchServices in Apple Mac OS X 10.4.6 allows remote attackers to cause Safari to launch unsafe content via long file name extensions, which prevents Download Validation from determining which application will be used to open the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1448 
Finder in Apple Mac OS X 10.3.9 and 10.4.6 allows user-assisted attackers to execute arbitrary code by tricking a user into launching an Internet Location item that appears to use a safe URL scheme, but which actually has a different and more risky scheme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1449 
Integer overflow in Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted MacMIME encapsulated attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1450 
Mail in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via an enriched text e-mail message with "invalid color information" that causes Mail to allocate and initialize arbitrary classes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1451 
MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the "New MySQL root password" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1452 
Stack-based buffer overflow in Preview in Apple Mac OS 10.4 up to 10.4.6 allows local users to execute arbitrary code via a deep directory hierarchy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1453 
Stack-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file containing malformed font information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T20:00:00.000Z
CVE-2006-1454 
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T20:00:00.000Z
CVE-2006-1455 
QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection interruption) via a QuickTime movie with a missing track, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1456 
Buffer overflow in QuickTime Streaming Server in Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code via a crafted RTSP request, which is not properly handled during message logging.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1457 
Safari on Apple Mac OS X 10.4.6, when "Open `safe' files after downloading" is enabled, will automatically expand archives, which could allow remote attackers to overwrite arbitrary files via an archive that contains a symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T21:00:00.000Z
CVE-2006-1458 
Integer overflow in Apple QuickTime Player before 7.1 allows remote attackers to execute arbitrary code via a crafted JPEG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T20:00:00.000Z
CVE-2006-1459 
Multiple integer overflows in Apple QuickTime before 7.1 allow remote attackers to cause a denial of service or execute arbitrary code via a crafted QuickTime movie (.MOV).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T20:00:00.000Z
CVE-2006-1460 
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie (.MOV), as demonstrated via a large size for a udta Atom.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T20:00:00.000Z
CVE-2006-1461 
Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime Flash (SWF) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-12T20:00:00.000Z