rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-4967 
Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtAllocateVirtualMemory, (2) NtConnectPort, (3) NtCreateFile, (4) NtCreateKey, (5) NtCreatePort, (6) NtDeleteFile, (7) NtDeleteValueKey, (8) NtLoadKey, (9) NtOpenFile, (10) NtOpenProcess, (11) NtOpenThread, (12) NtResumeThread, (13) NtSetContextThread, (14) NtSetValueKey, (15) NtSuspendProcess, (16) NtSuspendThread, and (17) NtTerminateThread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T01:00:00.000Z
CVE-2007-4968 
Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for (1) NtOpenProcess and (2) NtOpenThread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T01:00:00.000Z
CVE-2007-4969 
Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via unspecified kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtLoadKey, (4) NtOpenKey, (5) NtQueryValueKey, (6) NtSetValueKey, and (7) NtUnloadKey.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T01:00:00.000Z
CVE-2007-4970 
ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateFile, (2) NtCreateKey, (3) NtDeleteValueKey, (4) NtOpenFile, (5) NtOpenKey, and (6) NtSetValueKey.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T01:00:00.000Z
CVE-2007-4971 
ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateKey, (2) NtDeleteFile, (3) NtLoadDriver, (4) NtOpenSection, and (5) NtSetSystemTime.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T01:00:00.000Z
CVE-2007-4972 
RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks to the (1) NtCreateKey and (2) NtOpenKey Windows Native API functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T01:00:00.000Z
CVE-2007-4974 
Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T17:00:00.000Z
CVE-2007-4975 
Cross-site scripting (XSS) vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web script or HTML via the chapter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4976 
Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the log parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4977 
Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4978 
Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) Decoder.php and (2) Encoder.php in WBXML/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4979 
SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4980 
The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4981 
Cross-site scripting (XSS) vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document.  NOTE: because the details of the attack are uncertain, it is unclear whether this crosses privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4982 
Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the (1) SaveAsBMP or (2) SaveAsWMF method.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T18:00:00.000Z
CVE-2007-4983 
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ (dot dot backslash) in the second argument to the DownloadFromMusicStore method.  NOTE: some of these details are obtained from third party information.  NOTE: this can be leveraged for code execution by overwriting JetAudio.exe, which is launched by the control after completion of the method call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T19:00:00.000Z
CVE-2007-4984 
SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to execute arbitrary SQL commands via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-19T19:00:00.000Z
CVE-2007-4985 
ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an infinite loop in the ReadDCMImage function, related to ReadBlobByte function calls; or (2) an infinite loop in the ReadXCFImage function, related to ReadBlobMSBLong function calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-4986 
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-4987 
Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-4988 
Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-24T22:00:00.000Z
CVE-2007-4990 
The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-05T21:00:00.000Z
CVE-2007-4991 
The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially sensitive information (the destination IP address of another user's session) via an empty packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-4992 
Stack-based buffer overflow in the process_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-11T00:00:00.000Z
CVE-2007-4993 
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-27T17:00:00.000Z
CVE-2007-4994 
Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocation List (CRL) is being generated, which might prevent certain revoked certificates from appearing on the CRL quickly and allow users with revoked certificates to bypass the intended CRL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-06T21:00:00.000Z
CVE-2007-4995 
Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-13T01:00:00.000Z
CVE-2007-4996 
libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allows remote attackers to cause a denial of service (crash) via a nudge message that triggers an access of "an invalid memory location."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-4997 
Integer underflow in the ieee80211_rx function in net/ieee80211/ieee80211_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attackers to cause a denial of service (crash) via a crafted SKB length value in a runt IEEE 802.11 frame when the IEEE80211_STYPE_QOS_DATA flag is set, aka an "off-by-two error."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-06T19:00:00.000Z
CVE-2007-4998 
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-01-31T20:00:00.000Z
CVE-2007-4999 
libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service (NULL dereference and application crash) via a message that contains invalid HTML data, a different vector than CVE-2007-4996.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T22:00:00.000Z
CVE-2007-5000 
Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T18:00:00.000Z
CVE-2007-5001 
Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T00:00:00.000Z
CVE-2007-5003 
Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allow remote attackers to execute arbitrary code via a long (1) username or (2) password to the rxrLogin command in rxRPC.dll, or a long (3) username argument to the GetUserInfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5004 
Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to execute arbitrary code via a long username and a certain "useless" password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5005 
Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers to upload and overwrite arbitrary files via a ..\ (dot dot backslash) sequence in the destination filename argument to sub-function 8 in the rxrReceiveFileFromServer command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5006 
Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify if a peer is authenticated, which allows remote attackers to add and delete users, and start client restores.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5007 
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long response to a FETCH command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T20:00:00.000Z
CVE-2007-5008 
The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5009 
PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5010 
Cross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary web script or HTML via the URL to webbatch.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5011 
webbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the dumpinputdata parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5012 
Cross-site scripting (XSS) vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for all is enabled, allows remote attackers to inject arbitrary web script or HTML via the author parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5013 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote attackers to inject arbitrary web script or HTML via the (1) u, (2) p, (3) c, and (4) s parameters, and other unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5014 
Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in (1) the lvc_admin_dir parameter to modules/visitors2/admin/view-archiver.inc.php or (2) the lvc_include_dir parameter to modules/visitors2/include/menus.inc.php. NOTE: the modules/visitors2/include/config.inc.php vector is already covered by CVE-2006-4373.  NOTE: vector 1 is disputed by CVE because PHP encounters a fatal instantiation error on a direct request for the file, before reaching the include statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5015 
Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the sl_theme_unix_path parameter to (1) admin_footer.php, (2) info_footer.php, (3) theme_footer.php, (4) browse_footer.php, (5) account_footer.php, or (6) search_footer.php in core/theme/includes/.  NOTE: the vulnerability is present only when the administrator does not follow installation instructions about the requirement for .htaccess Limit support.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5016 
SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5017 
Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5018 
Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command.  NOTE: this issue might overlap with CVE-2004-1211.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5019 
Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-20T21:00:00.000Z
CVE-2007-5020 
Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF file, related to the mailto: option and Internet Explorer 7 on Windows XP.  NOTE: this information is based upon a vague pre-advisory by a reliable researcher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T17:00:00.000Z
CVE-2007-5022 
Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using "server-initiated prompted scheduling," allows remote attackers to read a client's data, aka IC53616.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T17:00:00.000Z
CVE-2007-5023 
Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075, and Server before 1.0.4 Build 56528 allows local users to gain privileges via unspecified vectors, possibly involving a malicious "program.exe" file in the C: folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5024 
EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2005-3620.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5025 
Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5026 
dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5027 
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the (1) DD or (2) DU parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5028 
Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z
CVE-2007-5029 
Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service (daemon crash), as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when (1) reading the option code and option length and (2) parsing options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-21T18:00:00.000Z