rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2889 
SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2890 
SQL injection vulnerability in category.php in cpCommerce 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id_category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2891 
Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) bank_data[root] parameter to modules/bank/includes/design/main.inc.php, or the (2) fm_data[root] parameter to (a) includes/config/master.inc.php or (b) includes/functions/master.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2892 
Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2893 
Heap-based buffer overflow in the bx_ne2k_c::rx_frame function in iodev/ne2k.cc in the emulated NE2000 device in Bochs 2.3 allows local users of the guest operating system to write to arbitrary memory locations and gain privileges on the host operating system via vectors that cause TXCNT register values to exceed the device memory size, aka "RX Frame heap overflow."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2894 
The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2895 
Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows remote attackers to execute arbitrary code via a long Directory property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2896 
Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and application hang) via certain network scans to ESM ports.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T01:00:00.000Z
CVE-2007-2897 
Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute arbitrary code after connecting a data stream to a device COM port; via requests for a URI containing a '/' immediately before and after the name of a DOS device, as demonstrated by the /AUX/.aspx URI, which bypasses a blacklist for DOS device requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2898 
SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2899 
Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbitrary PHP code into data/config.php via multiple parameters, as demonstrated via the threadperpage parameter in an editconfig action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2900 
Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2901 
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2902 
SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2903 
Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (OUACTRL.OCX) 1.0.1.9 allows remote attackers to cause a denial of service (probably winhlp32.exe crash) via a long first argument.  NOTE: it is not clear whether this issue crosses privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2904 
Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.0 through 6.3, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly a related issue to CVE-2006-5653.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2905 
SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2906 
Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclass that calls super.run from its run method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2907 
Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2908 
Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2909 
Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_calendar366_xss_fix_plugin.xml update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2910 
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_plugin.xml update, a related issue to CVE-2007-2909.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2911 
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field (GPC['search']['datelineafter'] variable), a related issue to CVE-2007-1573.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2912 
Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2913 
Cross-site scripting (XSS) vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2914 
Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) awards.php, (2) login.php, (3) register.php, (4) weapons.php, and possibly other unspecified files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2915 
Cross-site scripting (XSS) vulnerability in RM EasyMail Plus allows remote attackers to inject arbitrary web script or HTML via the title field in an email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2916 
Cross-site scripting (XSS) vulnerability in showown.php in GMTT Music Distro 1.2 allows remote attackers to inject arbitrary web script or HTML via the st parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-30T10:00:00.000Z
CVE-2007-2917 
Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T01:00:00.000Z
CVE-2007-2918 
Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-01T01:00:00.000Z
CVE-2007-2919 
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5) SubID, (6) BookID, (7) LibraryID, (8) SubURL, and (9) LoadOpf properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-06T22:00:00.000Z
CVE-2007-2920 
Multiple stack-based buffer overflows in the Zoomify Viewer ActiveX control in ZActiveX.dll might allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T22:00:00.000Z
CVE-2007-2921 
Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T23:00:00.000Z
CVE-2007-2923 
The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-18T10:00:00.000Z
CVE-2007-2924 
Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) allow remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-19T21:00:00.000Z
CVE-2007-2925 
The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-24T17:00:00.000Z
CVE-2007-2926 
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-24T17:00:00.000Z
CVE-2007-2927 
Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-08T01:11:00.000Z
CVE-2007-2928 
Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), allows remote attackers to execute arbitrary code via format string specifiers in unknown data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-15T19:00:00.000Z
CVE-2007-2929 
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code onto a client system and execute this code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-15T19:00:00.000Z
CVE-2007-2930 
The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote attackers to poison DNS caches via unknown vectors.  NOTE: this issue is different from CVE-2007-2926.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T01:00:00.000Z
CVE-2007-2931 
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving video conversation handling in Web Cam and video chat sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T22:00:00.000Z
CVE-2007-2932 
Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2933 
SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the form_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2934 
Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2935 
core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dict parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2936 
Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute arbitrary PHP code via a URL in the securelib parameter to (1) conf.php or (2) cp2.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2937 
PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the site_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2938 
Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to the (1) Send485CMD method, and possibly the (2) SetLoginID, (3) AddSite, (4) SetScreen, and (5) SetVideoServer methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2939 
Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to (1) ITX.php, (2) IT_Error.php, or (3) IT.php in include/pear/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2940 
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary PHP code via a URL in the pachtofile parameter to (1) skin/html/table.php or (2) login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2941 
Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) vbgsitemap/vbgsitemap-config.php or (2) vbgsitemap/vbgsitemap-vbseo.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2942 
SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2943 
PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2944 
WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/wabcmsn.mdb.  NOTE: this issue was originally reported for "webCMS," but this was an error by an unreliable researcher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2945 
RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for rmforum.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2946 
Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL) 14.5.0.44 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) or execute arbitrary code via a long DestinationPath property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2947 
Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the root_prefix parameter to (1) index.php, (2) email_subscribe.php, (3) download.php, or (4) development.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-31T00:00:00.000Z
CVE-2007-2948 
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to execute arbitrary code via a CDDB entry with a long (1) album title or (2) category.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-07T21:00:00.000Z
CVE-2007-2949 
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-04T15:00:00.000Z
CVE-2007-2950 
Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-23T16:00:00.000Z
CVE-2007-2951 
The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-26T18:00:00.000Z
CVE-2007-2952 
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-08-01T14:00:00.000Z
CVE-2007-2953 
Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-31T10:00:00.000Z
CVE-2007-2954 
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T22:00:00.000Z