rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-6295 
Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6296 
PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6297 
Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via the (1) LIMIT parameter to chat/deluser.php3, the (2) Link parameter to chat/edituser.php3, or the (3) LastCheck or (4) B parameter to chat/users_popupL.php3.  NOTE: the FontName vectors for start_page.css.php3 and style.css.php3 are already covered by CVE-2005-1619. The medium vectors for start_page.css.php3 (start_page.css.php) and style.css.php3 (style.css.php), and the From vector for users_popupL.php3 (users_popupL.php), are already covered by CVE-2005-3991.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6298 
Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6299 
Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitrary SQL commands via modules that pass input to the taxonomy_select_nodes function, as demonstrated by the (1) taxonomy_menu, (2) ajaxLoader, and (3) ubrowser contributed modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6300 
Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6301 
Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T18:00:00.000Z
CVE-2007-6302 
Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments, aka "ZDI-CAN-162."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T19:00:00.000Z
CVE-2007-6303 
MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T21:00:00.000Z
CVE-2007-6304 
The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T21:00:00.000Z
CVE-2007-6305 
Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC commands."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-10T21:00:00.000Z
CVE-2007-6306 
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6307 
Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6308 
Cross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6309 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the galleryID parameter in a usergallery upload action; or the (2) upID, (3) tag, (4) month, (5) userID, or (6) year parameter in a calendar announce action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6310 
Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote attackers to inject arbitrary web script or HTML via the handler parameter to (1) index.php and possibly (2) admin/index.php, and (3) the topic parameter to modules/feed/feed.php (aka modules/feed.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6311 
SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows remote attackers to execute arbitrary SQL commands via the nav_ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6312 
Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-11T21:00:00.000Z
CVE-2007-6313 
MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-18T22:00:00.000Z
CVE-2007-6314 
BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-6315 
Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-6316 
Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-6317 
Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-6318 
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "\" in a multibyte character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T00:00:00.000Z
CVE-2007-6319 
Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain list administrator privileges or (2) access arbitrary mailing lists via unknown vectors related to modification of client-side information; and (3) allow remote authenticated administrators to modify other account data by creating "new accounts that collide with existing accounts."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-19T22:00:00.000Z
CVE-2007-6320 
Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T01:00:00.000Z
CVE-2007-6321 
Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via style sheets containing expression commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-12T01:00:00.000Z
CVE-2007-6322 
Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6323 
Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6324 
PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6325 
PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the config[fsBase] parameter, a different vector than CVE-2006-2726.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6326 
Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6327 
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6328 
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command.  NOTE: the researcher reports a vendor response stating that this is not a security problem
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6329 
Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and (2) creator fields in docProps/core.xml in the OOXML ZIP container.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6330 
Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext or (2) weakly encrypted format to support client-side login authentication, which makes it easier for remote attackers to obtain database access by capturing credentials via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6331 
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method.  NOTE: only a user-assisted attack is possible on Windows Vista.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6332 
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6333 
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T19:00:00.000Z
CVE-2007-6334 
Ingres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products, assigns the privileges and identity of users to be the same as the first user, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T23:00:00.000Z
CVE-2007-6335 
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T01:00:00.000Z
CVE-2007-6336 
Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T01:00:00.000Z
CVE-2007-6337 
Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-31T19:00:00.000Z
CVE-2007-6338 
SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter (username field).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-15T01:00:00.000Z
CVE-2007-6339 
The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-01T17:20:00.000Z
CVE-2007-6340 
Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector (IV), which makes it easier for local users to obtain cleartext passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-05T02:00:00.000Z
CVE-2007-6341 
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T23:00:00.000Z
CVE-2007-6342 
SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T21:00:00.000Z
CVE-2007-6343 
Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T22:00:00.000Z
CVE-2007-6344 
Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T22:00:00.000Z
CVE-2007-6345 
SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the value parameter to the pack_var function in module/db.lib/db_mysql.lib.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T22:00:00.000Z
CVE-2007-6346 
Cross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T22:00:00.000Z
CVE-2007-6347 
PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Shop Evaluation 3.3.2, and (4) Shop Free 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the root_folder_path parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-13T22:00:00.000Z
CVE-2007-6348 
SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to create a Trojan Horse that introduces a PHP remote file inclusion vulnerability, which allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-14T19:00:00.000Z
CVE-2007-6349 
P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T23:00:00.000Z
CVE-2007-6350 
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including (1) unison, (2) rsync, (3) svn, and (4) svnserve, as originally demonstrated by creating a Subversion (SVN) repository with malicious hooks, then using svn to trigger execution of those hooks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-14T20:00:00.000Z
CVE-2007-6351 
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T02:00:00.000Z
CVE-2007-6352 
Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T02:00:00.000Z
CVE-2007-6353 
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-20T01:00:00.000Z
CVE-2007-6354 
Unspecified vulnerability in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6355.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-18T20:00:00.000Z
CVE-2007-6355 
Integer overflow in exiftags before 1.01 has unknown impact and attack vectors, resulting from a "field offset overflow" that triggers an "illegal memory access," a different vulnerability than CVE-2007-6354.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-18T20:00:00.000Z
CVE-2007-6356 
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-18T20:00:00.000Z
CVE-2007-6357 
Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file.  NOTE: due to the lack of details as of 20071210, it is not clear whether this issue is the same as CVE-2007-6026 or CVE-2005-0944.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-15T01:00:00.000Z
CVE-2007-6358 
pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-15T01:00:00.000Z
CVE-2007-6359 
The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service (failed assertion and system crash) via a crafted signed Mach-O binary that causes the hashes function to return NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-15T01:00:00.000Z