rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-3859 
Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka OID01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3860 
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01.  NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for '"' characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3861 
Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent attackers to have an unknown impact via custom applications that use JBO.KEY, aka JDEV01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3862 
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3863 
Unspecified vulnerability in Oracle JDeveloper for Application Server 10.1.2.2 and 10.1.3.1, and Collaboration Suite 10.1.2, allows context-dependent attackers to have an unknown impact via custom applications that use JBO.SERVER, aka JDEV02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3864 
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via (1) Instant Messaging/Presence (OCS01) and (2) Oracle Single Sign On (AS02).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3865 
Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3866 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b) Oracle iExpenses (APPS03), (c) Oracle Application Object Library (APPS09), and (1) APPS12, (2) APPS13, and (3) APPS14 in (d) Oracle Payables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3867 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to (1) APPS04, (2) APPS05, and (3) APPS06 in (a) Oracle Application Object Library, (4) APPS07 in Oracle Customer Intelligence, (5) APPS08 in Oracle Payments, (7) APPS10 in Oracle Human Resources, and (8) APPS11 in iRecruitment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3868 
Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote authenticated users or attackers to have an unknown impact via multiple vectors, aka (1) PSE01, (2) PSE02, and (3) PSE03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3869 
Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 Bundle 26 and 9.0 Bundle 7 allow remote authenticated users to have an unknown impact, aka (1) PSE04 and (2) PSE05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3870 
Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local users to have unknown impact via unknown vectors, aka (1) PSE06 and (2) PSE07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T19:00:00.000Z
CVE-2007-3871 
Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T19:00:00.000Z
CVE-2007-3872 
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-09T20:00:00.000Z
CVE-2007-3873 
Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap (VST) feature is enabled, allows local users to cause a denial of service (service crash) or execute arbitrary code via a file with a long pathname, which triggers the overflow during a ReadDirectoryChangesW callback notification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-22T23:00:00.000Z
CVE-2007-3874 
Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-06T19:00:00.000Z
CVE-2007-3875 
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss of antivirus functionality) via an invalid "previous listing chunk number" field in a CHM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-26T00:00:00.000Z
CVE-2007-3876 
Stack-based buffer overflow in SMB in Apple Mac OS X 10.4.11 allows local users to execute arbitrary code via (1) a long workgroup (-W) option to mount_smbfs or (2) an unspecified manipulation of the command line to smbutil.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-19T21:00:00.000Z
CVE-2007-3880 
Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core (SUNWsrspx) package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T01:00:00.000Z
CVE-2007-3881 
SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrary SQL commands via the msgid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3882 
SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3883 
The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in (1) the second argument to the Save method, or the first argument to the (2) SaveLayoutChanges or (3) SaveMenuUsageData method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3884 
SQL injection vulnerability in philboard_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.  NOTE: it was later reported that 2.0.1 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3885 
Cross-site scripting (XSS) vulnerability in philboard_search.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3886 
Cross-site scripting (XSS) vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3887 
Multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Isim, (2) Mesajiniz, and (3) E-posta fields.  NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3888 
Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action, possibly related to the term parameter to index.php; or (2) an anonymous blog entry, possibly involving the (a) posted_by, (b) subject, and (c) content parameters to index.php; as demonstrated by the onmouseover attribute of certain elements.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3889 
Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the current_subsection parameter to index.php and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2007-3890 
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T21:00:00.000Z
CVE-2007-3891 
Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HTML attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-14T22:00:00.000Z
CVE-2007-3892 
Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T22:00:00.000Z
CVE-2007-3893 
Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via unspecified vectors involving memory corruption from an unhandled error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T22:00:00.000Z
CVE-2007-3895 
Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted (1) WAV or (2) AVI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-3896 
The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-11T00:00:00.000Z
CVE-2007-3897 
Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T22:00:00.000Z
CVE-2007-3898 
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-14T01:00:00.000Z
CVE-2007-3899 
Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string in a Word file, aka "Word Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-09T22:00:00.000Z
CVE-2007-3901 
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafted SAMI file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-3902 
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-3903 
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-3905 
SQL injection vulnerability in Zoph before 0.7.0.1 might allow remote attackers to execute arbitrary SQL commands via the _order parameter to (1) photos.php and (2) edit_photos.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-19T17:00:00.000Z
CVE-2007-3906 
Unspecified vulnerability in Kaspersky Anti-Virus for Check Point FireWall-1 before Critical Fix 1 (5.5.161.0) might allow attackers to cause a denial of service (kernel hang) via unspecified vectors.  NOTE: it is not clear whether there is an attacker role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-19T17:00:00.000Z
CVE-2007-3907 
Unspecified vulnerability in login.pl in LedgerSMB 1.2.0 through 1.2.6 allows remote attackers to bypass authentication and perform certain actions as an arbitrary user via unspecified vectors involving a URL with a redirect parameter value, along with a callback parameter containing an escaped URL that specifies the action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-19T17:00:00.000Z
CVE-2007-3908 
Unspecified vulnerability in HP ServiceGuard for Linux for Red Hat Enterprise Linux (RHEL) 2.1 SG A.11.14.04 through A.11.14.06; RHEL 3.0 SG A.11.16.04 through A.11.16.10; and ServiceGuard Cluster Object Manager B.03.01.02 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2007-0980.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-19T17:00:00.000Z
CVE-2007-3909 
Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the (1) date and (2) limit parameters to index.php, and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-19T17:00:00.000Z
CVE-2007-3910 
Cross-site scripting (XSS) vulnerability in Bandersnatch 0.4 allows remote attackers to inject arbitrary JavaScript via a Jabber resource name and possibly other data items, which are stored in conversation logs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-19T17:00:00.000Z
CVE-2007-3911 
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-30T17:00:00.000Z
CVE-2007-3912 
checkrestart in debian-goodies before 0.34 allows local users to gain privileges via shell metacharacters in the name of the executable file for a running process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-10T17:00:00.000Z
CVE-2007-3913 
SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-06T22:00:00.000Z
CVE-2007-3915 
Mondo 2.24 has insecure handling of temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-07T21:38:34.000Z
CVE-2007-3916 
The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T00:00:00.000Z
CVE-2007-3917 
The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp.  NOTE: this issue affects both clients and servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-11T10:00:00.000Z
CVE-2007-3918 
Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-05T22:00:00.000Z
CVE-2007-3919 
(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-28T16:00:00.000Z
CVE-2007-3920 
GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T21:00:00.000Z
CVE-2007-3921 
gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-08T11:00:00.000Z
CVE-2007-3922 
Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3923 
The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance and the NM-WAE-502 network module, when Edge Services are configured, allows remote attackers to cause a denial of service (loss of service) via a flood of TCP SYN packets to port (1) 139 or (2) 445.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3924 
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670.  NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape; this issue could arise with other protocol handlers in IE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3925 
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3926 
Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3927 
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3928 
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry.  NOTE: this might overlap CVE-2007-3638.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z
CVE-2007-3929 
Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code via a crafted header in a torrent file, which leaves a dangling pointer to an invalid object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-21T00:00:00.000Z