rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-0951 
Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a (1) CD-ROM device or (2) U3-enabled USB device containing a filesystem with an Autorun.inf file, and possibly other vectors related to (a) AutoRun and (b) AutoPlay actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-24T22:00:00.000Z
CVE-2008-0952 
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T20:00:00.000Z
CVE-2008-0953 
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-04T20:00:00.000Z
CVE-2008-0955 
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote attackers to execute arbitrary code via a long CacheFolder property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-0956 
Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-12T01:30:00.000Z
CVE-2008-0957 
Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx) allow remote attackers to execute arbitrary code via unspecified initialization parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-20T10:00:00.000Z
CVE-2008-0958 
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTAudioGrabber2.dll allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-0959 
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in NCTAudioInformation2.dll, as used in (1) Power Audio CD Grabber 1.0, (2) Power Audio CD Burner 1.02, (3) CinematicMP3 1.4.0.0, (4) Alive MP3 WAV Converter 3.9.3.2, and possibly other products, allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-29T16:00:00.000Z
CVE-2008-0960 
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-10T18:00:00.000Z
CVE-2008-0961 
EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-0962 
Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-0963 
Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-04-14T16:00:00.000Z
CVE-2008-0964 
Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-08T18:12:00.000Z
CVE-2008-0965 
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-08T18:12:00.000Z
CVE-2008-0967 
Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707 and 2.x before 2.0.4 build 93057, and VMware Server before 1.0.6 build 91891 on Linux, and VMware ESXi 3.5 and VMware ESX 2.5.4 through 3.5, allows local users to gain privileges via a library path option in a configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-06-05T20:21:00.000Z
CVE-2008-0971 
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or HTML via (1) the Policy Name field in Search Based Retention Policy in Message Archiver; unspecified parameters in the (2) IP Configuration, (3) Administration, (4) Journal Accounts, (5) Retention Policy, and (6) GroupWise Sync components in Message Archiver; (7) input to search operations in Web Filter; and (8) input used in error messages and (9) hidden INPUT elements in (a) Spam Firewall, (b) IM Firewall, and (c) Web Filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-19T17:00:00.000Z
CVE-2008-0973 
Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to have an unknown impact via a packet with a long string in the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0974 
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a "vector<T> too long" exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0975 
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (CPU consumption) via a -1 value in the field that specifies the size of the vector<T> value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0976 
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed packet, as demonstrated by a packet of type (1) 0x2722 or (2) 0x272a.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0977 
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0978 
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0979 
Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0980 
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the url or type parameter to docs/examples/redirect.spy; (2) the x parameter to docs/examples/handlervalidate.spy; (3) the name parameter to spyce/examples/request.spy; (4) the Name parameter to spyce/examples/getpost.spy; (5) the mytextarea parameter, the mypass parameter, or an empty parameter to spyce/examples/formtag.spy; (6) the newline parameter to the default URI under demos/chat/; (7) the text1 parameter to docs/examples/formintro.spy; or (8) the mytext or mydate parameter to docs/examples/formtag.spy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0981 
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0982 
Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/automaton.spy, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-25T23:00:00.000Z
CVE-2008-0983 
lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor array, which allows remote attackers to cause a denial of service (crash) via a large number of connections, which triggers an out-of-bounds access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-26T18:00:00.000Z
CVE-2008-0984 
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote attackers to overwrite arbitrary memory and execute arbitrary code via a malformed MP4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-26T19:00:00.000Z
CVE-2008-0985 
Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to execute arbitrary code via a crafted GIF file whose logical screen height and width are different than the actual height and width.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-06T00:00:00.000Z
CVE-2008-0986 
Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-06T00:00:00.000Z
CVE-2008-0987 
Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and iPhoto 7.1.2, allows remote attackers to execute arbitrary code via a crafted Adobe Digital Negative (DNG) image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0988 
Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of service (crash) via crafted arguments that trigger a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0989 
Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string specifiers in the local hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0990 
notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0992 
Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0993 
Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local users to read the passwords via process listings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0994 
Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the file via brute force methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0995 
The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers to decrypt the file via brute force methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0996 
The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0997 
Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted PostScript Printer Description (PPD) file that is not properly handled when querying a network printer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T22:00:00.000Z
CVE-2008-0998 
Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allows local users to bypass authorization and execute arbitrary code via crafted distributed objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-0999 
Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk image, which triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-10001 Pro2col Stingray FTS cross site scriting
A vulnerability, which was classified as problematic, has been found in Pro2col Stingray FTS. The manipulation of the argument Username leads to cross site scripting. The attack may be initiated remotely. It is recommended to upgrade the affected component. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: cwe_id: CWE-80
description: CWE-80 Basic Cross Site Scripting
Affected products: vendor: Pro2col
product: Stingray FTS
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
version: 3.1
Credits: lang: en
value: Marc Ruef
Published: 2022-03-28T20:45:49.000Z
CVE-2008-10002 cfire24 ajaxlife cross site scripting
A vulnerability has been found in cfire24 ajaxlife up to 0.3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.3.3 is able to address this issue. The patch is identified as 9fb53b67312fe3f4336e01c1e3e1bedb4be0c1c8. It is recommended to upgrade the affected component. VDB-222286 is the identifier assigned to this vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross Site Scripting
Affected products: vendor: cfire24
product: ajaxlife
CVSS v3.1: version: 3.1
baseScore: 3.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
baseSeverity: LOW
Credits: lang: en
value: VulDB GitHub Commit Analyzer
Published: 2023-03-05T02:00:05.790Z
CVE-2008-10003 iGamingModules flashgames game.php sql injection
A vulnerability was found in iGamingModules flashgames 1.1.0. It has been classified as critical. Affected is an unknown function of the file game.php. The manipulation of the argument lid leads to sql injection. It is possible to launch the attack remotely. The name of the patch is 6e57683704885be32eea2ea614f80c9bb8f012c5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222288.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: iGamingModules
product: flashgames
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Credits: lang: en
value: VulDB GitHub Commit Analyzer
Published: 2023-03-05T02:00:06.874Z
CVE-2008-10004 Email Registration email_registration.module email_registration_user sql injection
A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function email_registration_user of the file email_registration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated remotely. Upgrading to version 6.x-1.0 is able to address this issue. The patch is identified as 126c141b7db038c778a2dc931d38766aad8d1112. It is recommended to upgrade the affected component. VDB-222334 is the identifier assigned to this vulnerability.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: n/a
product: Email Registration
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Credits: lang: en
value: VulDB GitHub Commit Analyzer
Published: 2023-03-06T22:31:03.084Z
CVE-2008-1000 
Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via ".." sequences in file attachments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-18T23:00:00.000Z
CVE-2008-1001 
Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that is not properly handled in the error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1002 
Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a crafted javascript: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1003 
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1004 
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the Web Inspector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1005 
WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1006 
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1007 
WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1008 
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1009 
Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScript by modifying the history object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z
CVE-2008-1010 
Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-03-19T00:00:00.000Z