rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-4626 
Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) via certain network traffic associated with entities larger than 2 Gb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T01:00:00.000Z
CVE-2007-4627 
SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T01:00:00.000Z
CVE-2007-4628 
SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T01:00:00.000Z
CVE-2007-4629 
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T01:00:00.000Z
CVE-2007-4630 
Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T01:00:00.000Z
CVE-2007-4631 
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T22:00:00.000Z
CVE-2007-4632 
Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) VTY/AUX or (2) CONSOLE setting on a device without AAA enabled, which allows remote attackers to bypass authentication and obtain a terminal session, a different vulnerability than CVE-1999-0293 and CVE-2005-2105.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4633 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4634 
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4635 
Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, possibly involving a buffer overflow, as demonstrated by ym8bug.exe.  NOTE: this might be related to CVE-2007-4515.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4636 
Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4637 
xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4638 
Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4639 
EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4640 
Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload and execute arbitrary PHP files in uploads/ via an Uploads action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4641 
Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting code into an Apache log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4642 
Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent function in d_net.c or the (2) Msg_Write function in net_msg.c, or (3) many commands that are not properly handled by the NetSv_ReadCommands function in d_netsv.c; or (4) cause a denial of service (daemon crash) via a chat (PKT_CHAT) message without a final '\0' character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4643 
Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a PKT_CHAT packet with a data length less than 3, which triggers an erroneous malloc, possibly related to the Sv_HandlePacket function in sv_main.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4644 
Format string vulnerability in the Cl_GetPackets function in cl_main.c in the client in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSV_CONSOLE_TEXT message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4645 
SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a newspost do action, a different vulnerability than CVE-2006-1108.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4646 
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4647 
newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4648 
The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows local users to gain privileges by (1) triggering a buffer overflow in a kernel pool via a string argument to ioctl 0xBF67201C; or by (2) sending a crafted KEVENT structure through ioctl 0xBF672028 to overwrite arbitrary memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4649 
MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-08-31T23:00:00.000Z
CVE-2007-4650 
Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3) lock and replace items via unknown vectors in (a) the WebDAV module; and (4) edit unspecified data files using "linked items" in WebDAV and (b) Reupload modules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T17:00:00.000Z
CVE-2007-4651 
Unspecified vulnerability in Adobe Connect Enterprise Server 6 allows remote attackers to read certain pages that are restricted to the administrator via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-12T01:00:00.000Z
CVE-2007-4652 
The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T19:00:00.000Z
CVE-2007-4653 
SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in a search action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4654 
Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144), possibly a related issue to CVE-2002-1024.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4655 
Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4656 
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4657 
Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory contents) or cause a denial of service (thread crash) via a large len value to the (1) strspn or (2) strcspn function, which triggers an out-of-bounds read.  NOTE: this affects different product versions than CVE-2007-3996.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4658 
The money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact and attack vectors, possibly related to a format string vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4659 
The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memory_limit violation, which has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4660 
Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4661 
The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow.  NOTE: this is due to an incomplete fix for CVE-2007-2872.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4662 
Buffer overflow in the php_openssl_make_REQ function in PHP before 5.2.4 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4663 
Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involving the glob function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4664 
Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds MAX_PATH_LEN, has unknown impact and attack vectors, aka CORE-1405.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4665 
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an XNET session that makes multiple simultaneous requests to register events, aka CORE-1403.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4666 
Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service (CPU and memory consumption) via "large network packets with garbage", aka CORE-1397.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4667 
Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4668 
Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4669 
The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), aka CORE-1148.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-04T22:00:00.000Z
CVE-2007-4670 
Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-05T00:00:00.000Z
CVE-2007-4671 
Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-27T22:00:00.000Z
CVE-2007-4672 
Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-07T20:00:00.000Z
CVE-2007-4673 
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file.  NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z
CVE-2007-4674 
An "integer arithmetic" error in Apple QuickTime 7.2 allows remote attackers to execute arbitrary code via a crafted movie file containing a movie atom with a large size value, which triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T20:00:00.000Z
CVE-2007-4675 
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-07T20:00:00.000Z
CVE-2007-4676 
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-07T20:00:00.000Z
CVE-2007-4677 
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-07T20:00:00.000Z
CVE-2007-4678 
AppleRAID in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows attackers to cause a denial of service (crash) via a crafted striped disk image, which triggers a NULL pointer dereference when it is mounted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4679 
CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4680 
CFNetwork in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 does not properly validate certificates, which allows remote attackers to spoof trusted SSL certificates via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4681 
Buffer overflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4 through 10.4.10 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted directory hierarchy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4682 
CoreText in Apple Mac OS X 10.4 through 10.4.10 allows attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted text content that triggers an access of an uninitialized object pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4683 
Directory traversal vulnerability in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to bypass the chroot mechanism via a relative path when changing the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4684 
Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a large num_sels argument to the i386_set_ldt system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4685 
The kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to gain privileges by executing setuid or setgid programs in which the stdio, stderr, or stdout file descriptors are "in an unexpected state."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4686 
Integer signedness error in the ttioctl function in bsd/kern/tty.c in the xnu kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to cause a denial of service (system shutdown) or gain privileges via a crafted TIOCSETD ioctl request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4687 
The remote_cmds component in Apple Mac OS X 10.4 through 10.4.10 contains a symbolic link from the tftpboot private directory to the root directory, which allows tftpd users to escape the private directory and access arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4688 
The Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to obtain all addresses for a host, including link-local addresses, via a Node Information Query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4689 
Double free vulnerability in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause a denial of service (system shutdown) or execute arbitrary code via crafted IPV6 packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4690 
Double free vulnerability in the NFS component in Apple Mac OS X 10.4 through 10.4.10 allows remote authenticated users to execute arbitrary code via a crafted AUTH_UNIX RPC packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z
CVE-2007-4691 
The NSURL component in Apple Mac OS X 10.4 through 10.4.10 performs case-sensitive comparisons that allow attackers to bypass intended restrictions for local file system URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T01:00:00.000Z