Provide references for further information: Can you share references or external links related to CVE-2007-0038?

{'name': 'TA07-093A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-093A.html'}, {'name': 'ADV-2007-1215', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1215'}, {'name': '2542', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2542'}, {'name': '20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0470.html'}, {'name': 'oval:org.mitre.oval:def:1854', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1854'}, {'name': '20070331 RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464342/100/0/threaded'}, {'name': 'VU#191609', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/191609'}, {'name': 'HPSBST02206', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/466186/100/200/threaded'}, {'name': '24659', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24659'}, {'name': 'TA07-089A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-089A.html'}, {'name': 'win-ani-code-execution(33301)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33301'}, {'name': '20070402 MS announces out-of-band patch for ANI 0day', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464460/100/100/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.determina.com/security_center/security_advisories/securityadvisory_0day_032907.asp'}, {'name': 'MS07-017', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017'}, {'name': 'TA07-100A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-100A.html'}, {'name': '33629', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33629'}, {'name': '20070402 More information on ZERT patch for ANI 0day', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464459/100/100/threaded'}, {'name': 'SSRT071354', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/466186/100/200/threaded'}, {'name': '20070330 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464269/100/0/threaded'}, {'name': '20070331 Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464340/100/0/threaded'}, {'name': '20070330 Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464339/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0038?


Explain the CVE ID: What does the identifier CVE-2007-0039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0039.

The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.


Provide references for further information: Can you share references or external links related to CVE-2007-0039?

{'name': '20070508 Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/468047/100/0/threaded'}, {'name': 'HPSBST02214', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/468871/100/200/threaded'}, {'name': '1018015', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018015'}, {'name': 'MS07-026', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026'}, {'name': '34390', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/34390'}, {'name': 'SSRT071422', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/468871/100/200/threaded'}, {'name': 'oval:org.mitre.oval:def:1593', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1593'}, {'name': '25183', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25183'}, {'name': 'TA07-128A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-128A.html'}, {'name': 'exchange-ical-dos(33888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33888'}, {'name': 'ADV-2007-1711', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1711'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.determina.com/security.research/vulnerabilities/exchange-ical-modprops.html'}, {'name': '23808', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23808'}, {'name': '20070509 Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-May/063232.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0039?


Explain the CVE ID: What does the identifier CVE-2007-0040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0040.

The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based Systems SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted LDAP request with an unspecified number of "convertible attributes."


Provide references for further information: Can you share references or external links related to CVE-2007-0040?

{'name': 'SSRT071446', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html'}, {'name': '24800', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/24800'}, {'name': 'oval:org.mitre.oval:def:2012', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2012'}, {'name': '20070710 Microsoft Windows Active Directory Remote Code Execution', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/267.html'}, {'name': '1018355', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018355'}, {'name': '26002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26002'}, {'name': '35960', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35960'}, {'name': 'VU#487905', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/487905'}, {'name': 'ADV-2007-2481', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2481'}, {'name': 'TA07-191A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-191A.html'}, {'name': 'MS07-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-039'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0040?


Explain the CVE ID: What does the identifier CVE-2007-0041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0041.

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2007-0041?

{'name': 'SSRT071446', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html'}, {'name': 'MS07-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040'}, {'name': 'ADV-2007-2482', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2482'}, {'name': '35954', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35954'}, {'name': '26003', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26003'}, {'name': 'oval:org.mitre.oval:def:2093', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2093'}, {'name': 'TA07-191A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-191A.html'}, {'name': '24778', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/24778'}, {'name': 'ms-dotnet-pe-loader-bo(34637)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34637'}, {'name': '1018356', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018356'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0041?


Explain the CVE ID: What does the identifier CVE-2007-0042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0042.

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2007-0042?

{'name': 'SSRT071446', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html'}, {'name': 'MS07-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040'}, {'name': 'ADV-2007-2482', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2482'}, {'name': 'oval:org.mitre.oval:def:2070', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2070'}, {'name': '26003', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26003'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security-assessment.com/files/advisories/2007-07-11_Multiple_.NET_Null_Byte_Injection_Vulnerabilities.pdf'}, {'name': 'TA07-191A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-191A.html'}, {'name': '1018356', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018356'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0042?


Explain the CVE ID: What does the identifier CVE-2007-0043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0043.

The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".


Provide references for further information: Can you share references or external links related to CVE-2007-0043?

{'name': 'SSRT071446', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html'}, {'name': 'MS07-040', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040'}, {'name': 'ADV-2007-2482', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2482'}, {'name': '35956', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35956'}, {'name': '26003', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26003'}, {'name': 'oval:org.mitre.oval:def:1873', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1873'}, {'name': 'ms-dotnet-jit-bo(34639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34639'}, {'name': 'TA07-191A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-191A.html'}, {'name': '1018356', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018356'}, {'name': '24811', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/24811'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0043?


Explain the CVE ID: What does the identifier CVE-2007-0044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0044.

Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauthorized requests to other web sites via a URL in the (1) FDF, (2) xml, and (3) xfdf AJAX request parameters, following the # (hash) character, aka "Universal CSRF and session riding."


Provide references for further information: Can you share references or external links related to CVE-2007-0044?

{'name': '21858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21858'}, {'tags': ['x_refsource_MISC'], 'url': 'http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf'}, {'name': '23882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23882'}, {'name': '20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455801/100/0/threaded'}, {'name': 'ADV-2007-0032', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0032'}, {'name': '2090', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2090'}, {'name': 'SUSE-SA:2007:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html'}, {'name': '23812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23812'}, {'name': '1017469', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017469'}, {'name': 'oval:org.mitre.oval:def:10042', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10042'}, {'name': 'adobe-acrobat-pdf-csrf(31266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31266'}, {'name': '29065', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29065'}, {'name': 'GLSA-200701-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200701-16.xml'}, {'name': 'RHSA-2008:0144', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0144.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wisec.it/vulns.php?page=9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0044?


Explain the CVE ID: What does the identifier CVE-2007-0045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0045.

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, for Mozilla Firefox, Microsoft Internet Explorer 6 SP1, Google Chrome, Opera 8.5.4 build 770, and Opera 9.10.8679 on Windows allow remote attackers to inject arbitrary JavaScript and conduct other attacks via a .pdf URL with a javascript: or res: URI with (1) FDF, (2) XML, and (3) XFDF AJAX parameters, or (4) an arbitrarily named name=URI anchor identifier, aka "Universal XSS (UXSS)."


Provide references for further information: Can you share references or external links related to CVE-2007-0045?

{'name': 'RHSA-2007:0021', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0021.html'}, {'name': '23691', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23691'}, {'name': 'TA09-286B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-286B.html'}, {'name': 'RHSA-2007:0017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2007-0017.html'}, {'name': '21858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21858'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf'}, {'name': '20070103 Universal XSS with PDF files: highly dangerous', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455790/100/0/threaded'}, {'name': '1023007', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023007'}, {'name': '23882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23882'}, {'name': '20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455801/100/0/threaded'}, {'name': 'ADV-2007-0032', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0032'}, {'name': '24457', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24457'}, {'name': 'HPSBUX02153', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742'}, {'name': 'adobe-acrobat-pdf-xss(31271)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31271'}, {'name': '20070103 Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455831/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb09-15.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2007/mfsa2007-02.html'}, {'name': '2090', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2090'}, {'name': 'SUSE-SA:2007:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html'}, {'name': '102847', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1'}, {'name': '33754', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33754'}, {'name': 'ADV-2007-0957', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0957'}, {'name': '20070103 RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455836/100/0/threaded'}, {'name': '23812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23812'}, {'name': '20070104 Universal PDF XSS After Party', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455906/100/0/threaded'}, {'name': '1017469', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017469'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa07-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/advisories/apsa07-02.html'}, {'name': '23483', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23483'}, {'name': '23877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23877'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/blog/universal-pdf-xss-after-party'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb07-01.html'}, {'name': 'oval:org.mitre.oval:def:9693', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9693'}, {'name': 'oval:org.mitre.oval:def:6487', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6487'}, {'name': 'SSRT061181', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742'}, {'name': 'ADV-2009-2898', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/2898'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gnucitizen.org/blog/danger-danger-danger/'}, {'name': 'GLSA-200701-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200701-16.xml'}, {'name': '24533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24533'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.disenchant.ch/blog/hacking-with-browser-plugins/34'}, {'name': 'SSA:2007-066-05', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131'}, {'name': 'VU#815960', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/815960'}, {'name': '20070103 Re: Universal XSS with PDF files: highly dangerous', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455800/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wisec.it/vulns.php?page=9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0045?


Explain the CVE ID: What does the identifier CVE-2007-0046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0046.

Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.


Provide references for further information: Can you share references or external links related to CVE-2007-0046?

{'name': 'RHSA-2007:0021', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0021.html'}, {'name': '23691', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23691'}, {'name': 'RHSA-2007:0017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2007-0017.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf'}, {'name': '23882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23882'}, {'name': '20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455801/100/0/threaded'}, {'name': 'ADV-2007-0032', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0032'}, {'name': '2090', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2090'}, {'name': 'SUSE-SA:2007:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html'}, {'name': '102847', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102847-1'}, {'name': 'ADV-2007-0957', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0957'}, {'name': 'oval:org.mitre.oval:def:9684', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9684'}, {'name': '23812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23812'}, {'name': '1017469', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017469'}, {'name': '23877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23877'}, {'name': 'adobe-acrobat-msvcrt-code-execution(31272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31272'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb07-01.html'}, {'name': 'GLSA-200701-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200701-16.xml'}, {'name': '24533', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24533'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wisec.it/vulns.php?page=9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0046?


Explain the CVE ID: What does the identifier CVE-2007-0047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0047.

CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the javascript: URI in the (1) FDF, (2) XML, or (3) XFDF AJAX request parameters.


Provide references for further information: Can you share references or external links related to CVE-2007-0047?

{'name': 'adobe-acrobat-xmlhttp-response-splitting(31291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31291'}, {'tags': ['x_refsource_MISC'], 'url': 'http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf'}, {'name': '23882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23882'}, {'name': 'ADV-2007-0032', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0032'}, {'name': 'SUSE-SA:2007:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html'}, {'name': '1017469', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017469'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0047?


Explain the CVE ID: What does the identifier CVE-2007-0048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0048.

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service (memory consumption) via a long sequence of # (hash) characters appended to a PDF URL, related to a "cross-site scripting issue."


Provide references for further information: Can you share references or external links related to CVE-2007-0048?

{'name': 'TA09-286B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-286B.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf'}, {'name': '1023007', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1023007'}, {'name': '23882', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23882'}, {'name': '20070103 Adobe Acrobat Reader Plugin - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455801/100/0/threaded'}, {'name': 'ADV-2007-0032', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0032'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb09-15.html'}, {'name': '2090', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2090'}, {'name': 'oval:org.mitre.oval:def:6348', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6348'}, {'name': 'SUSE-SA:2007:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2007-Jan/0012.html'}, {'name': '33754', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/33754'}, {'name': '23812', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23812'}, {'name': '1017469', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017469'}, {'name': 'adobe-acrobat-character-dos(31273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31273'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb07-01.html'}, {'name': 'ADV-2009-2898', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/2898'}, {'name': 'GLSA-200701-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200701-16.xml'}, {'name': '31596', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.wisec.it/vulns.php?page=9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0048?


Explain the CVE ID: What does the identifier CVE-2007-0049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0049.

Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct request to Customize.asp.


Provide references for further information: Can you share references or external links related to CVE-2007-0049?

{'name': '31682', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31682'}, {'name': '23564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23564'}, {'name': '21847', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21847'}, {'name': '3068', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3068'}, {'name': 'tasktrackerpro-customize-auth-bypass(31235)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31235'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0049?


Explain the CVE ID: What does the identifier CVE-2007-0050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0050.

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter.  NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests that there is a small time window of risk before the installation is complete


Provide references for further information: Can you share references or external links related to CVE-2007-0050?

{'name': '20070103 OpenPinboard <= Remote File Include', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455795/100/0/threaded'}, {'name': '20070103 Re: OpenPinboard <= Remote File Include', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455818/100/0/threaded'}, {'name': '20070106 Re: OpenPinboard <= Remote File Include', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2007-01/0176.html'}, {'name': '33375', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33375'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0050?


Explain the CVE ID: What does the identifier CVE-2007-0051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0051.

Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed.


Provide references for further information: Can you share references or external links related to CVE-2007-0051?

{'name': '23615', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23615'}, {'name': "20070104 DMA[2007-0104a] - 'iLife iPhoto Photocasing Format String Vulnerability'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455968/100/0/threaded'}, {'name': '21871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21871'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.info-pull.com/moab/MOAB-04-01-2007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=305215'}, {'name': '31165', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31165'}, {'name': "20070104 DMA[2007-0104a] - 'iLife iPhoto Photocasing Format String Vulnerability'", 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0100.html'}, {'name': 'APPLE-SA-2007-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2007/Mar//msg00003.html'}, {'name': 'ADV-2007-0057', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0057'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2007-0104a%5D.txt'}, {'name': 'iphoto-xmltitle-format-string(31281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31281'}, {'name': '3080', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3080'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0051?


Explain the CVE ID: What does the identifier CVE-2007-0052 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0052.

SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0052?

{'name': '3061', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3061'}, {'name': '23576', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23576'}, {'name': 'vicayn-haberdetay-sql-injection(31213)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31213'}, {'name': 'ADV-2007-0015', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0015'}, {'name': '31518', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31518'}, {'name': '21836', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21836'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0052?


Explain the CVE ID: What does the identifier CVE-2007-0053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0053.

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0053?

{'name': '32539', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32539'}, {'name': '21833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21833'}, {'name': '23572', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23572'}, {'name': '3062', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3062'}, {'name': 'autodealer-detail-sql-injection(31219)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31219'}, {'name': 'ADV-2007-0016', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0016'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0053?


Explain the CVE ID: What does the identifier CVE-2007-0054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0054.

Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the sortby parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-0054?

{'name': '20070101 vBulletin vCard PRO XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455615/100/0/threaded'}, {'name': 'vcard-gbrowse-xss(31182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31182'}, {'name': '21844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21844'}, {'name': '33359', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33359'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0054?


Explain the CVE ID: What does the identifier CVE-2007-0055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0055.

Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read arbitrary files via directory traversal sequences in the Name parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-0055?

{'name': 'formbankserver-name-directory-traversal(31214)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31214'}, {'name': '32545', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32545'}, {'name': '3063', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3063'}, {'name': 'ADV-2007-0012', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0012'}, {'name': '23539', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0055?


Explain the CVE ID: What does the identifier CVE-2007-0056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0056.

Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) ashop/catalogue.php and (b) ashop/basket.php, the (2) exp parameter to ashop/catalogue.php, the (3) searchstring parameter to (c) ashop/search.php, the (4) checkout and (5) action parameters to (d) ashop/shipping.php, the cat parameter to (f) cart-path/admin/editcatalogue.php, and the (7) resultpage parameter to (g) cart-path/admin/salesadmin.php.


Provide references for further information: Can you share references or external links related to CVE-2007-0056?

{'name': '23547', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23547'}, {'name': '20070101 AShop Shopping Cart Multiple XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455629/100/0/threaded'}, {'name': '21845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21845'}, {'name': '2091', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2091'}, {'name': '32553', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32553'}, {'name': '32556', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32556'}, {'name': '32554', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32554'}, {'name': '32558', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32558'}, {'name': 'ashop-multiple-scripts-xss(31178)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31178'}, {'name': '32555', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32555'}, {'name': '32557', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32557'}, {'name': 'ADV-2007-0028', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0028'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0056?


Explain the CVE ID: What does the identifier CVE-2007-0057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0057.

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication key, which causes all devices to have the same shared sercet and allows remote attackers to gain unauthorized access.


Provide references for further information: Can you share references or external links related to CVE-2007-0057?

{'name': '23617', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23617'}, {'name': 'ADV-2007-0030', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0030'}, {'name': '32578', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32578'}, {'name': '20070103 Multiple Vulnerabilities in Cisco Clean Access', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml'}, {'name': '1017465', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017465'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0057?


Explain the CVE ID: What does the identifier CVE-2007-0058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0058.

Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and download arbitrary manual database backups by guessing the snapshot filename using brute force, then making a direct request for the file.


Provide references for further information: Can you share references or external links related to CVE-2007-0058?

{'name': '23556', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23556'}, {'name': '32579', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/32579'}, {'name': 'ADV-2007-0030', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0030'}, {'name': '20070103 Multiple Vulnerabilities in Cisco Clean Access', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20070103-CleanAccess.shtml'}, {'name': '1017465', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017465'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0058?


Explain the CVE ID: What does the identifier CVE-2007-0059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0059.

Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents via a QuickTime movie (.MOV) with an HREF Track (HREFTrack) that contains an automatic action tag with a local URI, which is executed in a local zone during preview, as exploited by a MySpace worm.


Provide references for further information: Can you share references or external links related to CVE-2007-0059?

{'name': 'VU#304064', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/304064'}, {'name': '31164', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/31164'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gnucitizen.org/blog/backdooring-quicktime-movies/'}, {'name': 'APPLE-SA-2007-03-05', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://projects.info-pull.com/moab/MOAB-03-01-2007.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=305149'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0059?


Explain the CVE ID: What does the identifier CVE-2007-0060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0060.

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.


Provide references for further information: Can you share references or external links related to CVE-2007-0060?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp'}, {'name': 'ADV-2007-2638', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2638'}, {'name': 'systems-management-bo(32234)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32234'}, {'name': '1018449', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018449'}, {'name': '26190', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26190'}, {'name': '20070725 [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/474602/100/0/threaded'}, {'name': '25051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/25051'}, {'name': '20070724 CA Message Queuing Server (Cam.exe) Overflow', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/272.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0060?


Explain the CVE ID: What does the identifier CVE-2007-0061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0061.

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed packet that triggers "corrupt stack memory."


Provide references for further information: Can you share references or external links related to CVE-2007-0061?

{'name': '20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html'}, {'name': '25729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/25729'}, {'name': 'GLSA-200711-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200711-23.xml'}, {'name': 'USN-543-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-543-1'}, {'name': '1018717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018717'}, {'name': 'ADV-2007-3229', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/3229'}, {'name': '27694', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27694'}, {'name': '20070919 VMWare DHCP Server Remote Code Execution Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/275.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/server/doc/releasenotes_server.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/player2/doc/releasenotes_player2.html'}, {'name': 'dhcp-malformed-packet-bo(33101)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33101'}, {'name': '26890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ace/doc/releasenotes_ace.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/player/doc/releasenotes_player.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html'}, {'name': '27706', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27706'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0061?


Explain the CVE ID: What does the identifier CVE-2007-0062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0062.

Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related to servers configured to send many DHCP options to clients.


Provide references for further information: Can you share references or external links related to CVE-2007-0062?

{'name': '20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html'}, {'name': '25729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/25729'}, {'name': 'GLSA-200711-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200711-23.xml'}, {'name': '20090312 rPSA-2009-0041-1 dhclient dhcp libdhcp4client', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/501759/100/0/threaded'}, {'name': 'USN-543-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-543-1'}, {'name': '1018717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018717'}, {'name': 'ADV-2007-3229', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/3229'}, {'name': '27694', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27694'}, {'name': '31396', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/31396'}, {'name': '20070919 VMWare DHCP Server Remote Code Execution Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/275.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/server/doc/releasenotes_server.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wiki.rpath.com/Advisories:rPSA-2009-0041'}, {'name': 'dhcp-param-overflow(33102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33102'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=339561'}, {'name': 'GLSA-200808-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200808-05.xml'}, {'name': 'MDVSA-2009:153', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2009:153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/player2/doc/releasenotes_player2.html'}, {'name': 'SUSE-SR:2009:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html'}, {'name': '26890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ace/doc/releasenotes_ace.html'}, {'name': '34263', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/player/doc/releasenotes_player.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html'}, {'name': '27706', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27706'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=227135'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0062?


Explain the CVE ID: What does the identifier CVE-2007-0063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0063.

Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers to execute arbitrary code via a malformed DHCP packet that triggers a stack-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2007-0063?

{'name': '20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html'}, {'name': '25729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/25729'}, {'name': 'GLSA-200711-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200711-23.xml'}, {'name': 'USN-543-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-543-1'}, {'name': 'dhcp-param-underflow(33103)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/33103'}, {'name': '1018717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018717'}, {'name': 'ADV-2007-3229', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/3229'}, {'name': '27694', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27694'}, {'name': '20070919 VMWare DHCP Server Remote Code Execution Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/275.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/server/doc/releasenotes_server.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/player2/doc/releasenotes_player2.html'}, {'name': '26890', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ace/doc/releasenotes_ace.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/player/doc/releasenotes_player.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html'}, {'name': '27706', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27706'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0063?


Explain the CVE ID: What does the identifier CVE-2007-0064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0064.

Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.


Provide references for further information: Can you share references or external links related to CVE-2007-0064?

{'name': '1019074', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019074'}, {'name': 'VU#319385', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/319385'}, {'name': 'oval:org.mitre.oval:def:3622', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3622'}, {'name': 'MS07-068', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-068'}, {'name': 'ADV-2007-4183', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/4183'}, {'name': 'SSRT071506', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/485268/100/0/threaded'}, {'name': '26776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/26776'}, {'name': 'HPSBST02299', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/485268/100/0/threaded'}, {'name': 'TA07-345A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-345A.html'}, {'name': '28034', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28034'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0064?


Explain the CVE ID: What does the identifier CVE-2007-0065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0065.

Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request.


Provide references for further information: Can you share references or external links related to CVE-2007-0065?

{'name': 'oval:org.mitre.oval:def:5388', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5388'}, {'name': '28902', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28902'}, {'name': 'ADV-2008-0510', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0510/references'}, {'name': 'HPSBST02314', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120361015026386&w=2'}, {'name': '1019373', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019373'}, {'name': '27661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27661'}, {'name': 'SSRT080016', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=120361015026386&w=2'}, {'name': 'MS08-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-008'}, {'name': 'TA08-043C', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-043C.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0065?


Explain the CVE ID: What does the identifier CVE-2007-0066 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0066.

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-bounds read, aka "Windows Kernel TCP/IP/ICMP Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2007-0066?

{'name': 'MS08-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001'}, {'name': '20070108 Multiple (3) Microsoft Windows TCP/IP Remote Code Execution and DoS Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/282.html'}, {'name': 'TA08-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-008A.html'}, {'name': '1019166', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019166'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-2-the-case-of-the-moderate-icmp-mitigations.aspx'}, {'name': '28297', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28297'}, {'name': '27139', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27139'}, {'name': 'ADV-2008-0069', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0069'}, {'name': 'oval:org.mitre.oval:def:5271', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5271'}, {'name': 'win-tcpip-icmp-dos(39254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39254'}, {'name': 'SSRT080003', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/486317/100/0/threaded'}, {'name': 'HPSBST02304', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/486317/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0066?


Explain the CVE ID: What does the identifier CVE-2007-0067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0067.

Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a denial of service (daemon crash) via requests for URLs that reference certain files.


Provide references for further information: Can you share references or external links related to CVE-2007-0067?

{'name': '24307', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/24307'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21257251'}, {'name': '35766', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35766'}, {'name': 'domino-unspecified-dos(34689)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34689'}, {'name': '1018189', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018189'}, {'name': '25542', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25542'}, {'name': 'ADV-2007-2046', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2046'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0067?


Explain the CVE ID: What does the identifier CVE-2007-0068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0068.

IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows remote authenticated users to gain privileges via a modified agent in a server database.


Provide references for further information: Can you share references or external links related to CVE-2007-0068?

{'name': '25520', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25520'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21258784'}, {'name': 'ADV-2007-2063', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2063'}, {'name': '24322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/24322'}, {'name': '35765', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35765'}, {'name': 'domino-signature-privilege-escalation(34718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0068?


Explain the CVE ID: What does the identifier CVE-2007-0069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0069.

Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that trigger memory corruption, aka "Windows Kernel TCP/IP/IGMPv3 and MLDv2 Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2007-0069?

{'name': 'MS08-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-001'}, {'name': 'win-ssm-mld-bo(39453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39453'}, {'name': '20070108 Multiple (3) Microsoft Windows TCP/IP Remote Code Execution and DoS Vulnerabilities', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/282.html'}, {'name': 'VU#115083', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/115083'}, {'name': 'TA08-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-008A.html'}, {'name': '1019166', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1019166'}, {'name': 'oval:org.mitre.oval:def:5370', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5370'}, {'name': 'win-ssm-igmp-bo(39452)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39452'}, {'name': '28297', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28297'}, {'name': 'ADV-2008-0069', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0069'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.technet.com/swi/archive/2008/01/08/ms08-001-part-3-the-case-of-the-igmp-network-critical.aspx'}, {'name': '27100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/27100'}, {'name': 'SSRT080003', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/486317/100/0/threaded'}, {'name': 'HPSBST02304', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/486317/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0069?


Explain the CVE ID: What does the identifier CVE-2007-0071 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0071.

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2007-0071?

{'name': '1020114', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1020114'}, {'name': '29865', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29865'}, {'tags': ['x_refsource_MISC'], 'url': 'http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf'}, {'name': '30507', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30507'}, {'name': '29386', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/29386'}, {'name': 'TA08-149A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-149A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb08-11.html'}, {'name': 'ADV-2008-1724', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1724/references'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html'}, {'name': 'RHSA-2008:0221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2008-0221.html'}, {'name': 'TA08-150A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-150A.html'}, {'name': 'oval:org.mitre.oval:def:10379', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10379'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-08-032/'}, {'name': 'ADV-2008-1662', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1662/references'}, {'name': '44282', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/44282'}, {'tags': ['x_refsource_MISC'], 'url': 'http://isc.sans.org/diary.html?storyid=4465'}, {'name': '30430', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30430'}, {'name': 'APPLE-SA-2008-05-28', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2008//May/msg00001.html'}, {'name': 'SUSE-SA:2008:022', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html'}, {'name': '28695', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/28695'}, {'name': '29763', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29763'}, {'name': '1019811', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1019811'}, {'name': '238305', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1'}, {'name': 'GLSA-200804-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml'}, {'name': 'multimedia-file-integer-overflow(37277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/37277'}, {'name': 'ADV-2008-1697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/1697'}, {'name': 'VU#159523', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/159523'}, {'name': 'TA08-100A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA08-100A.html'}, {'name': 'VU#395473', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/395473'}, {'name': '20080408 Adobe Flash Player Invalid Pointer Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/289.html'}, {'name': '30404', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/30404'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0071?


Explain the CVE ID: What does the identifier CVE-2007-0072 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0072.

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a read operation over RPC.


Provide references for further information: Can you share references or external links related to CVE-2007-0072?

{'name': '32618', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32618'}, {'name': '32261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/32261'}, {'name': 'application-rpc-read-bo(38760)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/38760'}, {'name': 'VU#768681', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/768681'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.iss.net/archive/trend.html'}, {'name': 'ADV-2008-3127', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/3127'}, {'name': '20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflows (3)', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/309.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0072?


Explain the CVE ID: What does the identifier CVE-2007-0073 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0073.

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a file read operation over RPC.


Provide references for further information: Can you share references or external links related to CVE-2007-0073?

{'name': '32618', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32618'}, {'name': '32261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/32261'}, {'name': 'VU#768681', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/768681'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.iss.net/archive/trend.html'}, {'name': 'ADV-2008-3127', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/3127'}, {'name': 'application-rpc-file-read-bo(39050)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39050'}, {'name': '20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflows (3)', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/309.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0073?


Explain the CVE ID: What does the identifier CVE-2007-0074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0074.

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC.


Provide references for further information: Can you share references or external links related to CVE-2007-0074?

{'name': '32618', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/32618'}, {'name': '32261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/32261'}, {'name': 'VU#768681', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/768681'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.iss.net/archive/trend.html'}, {'name': 'ADV-2008-3127', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/3127'}, {'name': '20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflows (3)', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/threats/309.html'}, {'name': 'application-rpc-folder-read-bo(39051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39051'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0074?


Explain the CVE ID: What does the identifier CVE-2007-0075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0075.

AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb.


Provide references for further information: Can you share references or external links related to CVE-2007-0075?

{'name': '33364', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33364'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=82'}, {'name': 'aspbb-aspbb-info-disclosure(31230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31230'}, {'name': '20070102 AspBB Remote Password Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455683/100/0/threaded'}, {'name': '2100', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0075?


Explain the CVE ID: What does the identifier CVE-2007-0076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0076.

Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for openforum.mdb.


Provide references for further information: Can you share references or external links related to CVE-2007-0076?

{'name': '20070102 Openforum Remote password Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455684/100/0/threaded'}, {'name': 'openforum-openforum-password-disclosure(31209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31209'}, {'name': '33366', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33366'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=80'}, {'name': '2099', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0076?


Explain the CVE ID: What does the identifier CVE-2007-0077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0077.

lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain file in admin/db/newFolder/.


Provide references for further information: Can you share references or external links related to CVE-2007-0077?

{'name': 'lblog-newfolder-information-disclosure(31229)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31229'}, {'name': '2098', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2098'}, {'name': '20070102 lblog Remote Password Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455681/100/0/threaded'}, {'name': '1017462', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017462'}, {'name': '33367', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33367'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=79'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0077?


Explain the CVE ID: What does the identifier CVE-2007-0078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0078.

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.


Provide references for further information: Can you share references or external links related to CVE-2007-0078?

{'name': 'battleblog-blankmaster-info-disclosure(31224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31224'}, {'name': '2097', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2097'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=76'}, {'name': '33360', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33360'}, {'name': '20070101 BattleBlog Database Download Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455614/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0078?


Explain the CVE ID: What does the identifier CVE-2007-0079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0079.

rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) data/admin.mdb or (2) data/rblog.mdb.


Provide references for further information: Can you share references or external links related to CVE-2007-0079?

{'name': '32572', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32572'}, {'name': '2102', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2102'}, {'name': 'rblog-database-info-disclosure(31200)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31200'}, {'name': '23538', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23538'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.aria-security.com/forum/showthread.php?t=77'}, {'name': '20070101 rblog Database Download Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455626/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0079?


Explain the CVE ID: What does the identifier CVE-2007-0080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0080.

Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance.  NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files."  CVE concurs with the dispute


Provide references for further information: Can you share references or external links related to CVE-2007-0080?

{'name': '32082', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/32082'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.freeradius.org/security.html'}, {'name': '20070211 FreeRADIUS dispute of CVE-2007-0080', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2007-February/001304.html'}, {'name': '1017463', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1017463'}, {'name': 'freeradius-smbconnectserver-bo(31248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31248'}, {'name': '20070102 FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455678/100/0/threaded'}, {'name': '20070103 Re: FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455812/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0080?


Explain the CVE ID: What does the identifier CVE-2007-0081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0081.

Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by placing it in the installation directory.


Provide references for further information: Can you share references or external links related to CVE-2007-0081?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.matousec.com/info/advisories/Kerio-Fake-iphlpapi-DLL-injection.php'}, {'name': '33356', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/33356'}, {'name': "20070101 Kerio Fake 'iphlpapi' DLL injection Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455624/100/0/threaded'}, {'name': '21828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21828'}, {'name': '2095', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2095'}, {'name': 'kerio-directory-code-execution(31232)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31232'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0081?


Explain the CVE ID: What does the identifier CVE-2007-0082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0082.

users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload and execute arbitrary PHP scripts.


Provide references for further information: Can you share references or external links related to CVE-2007-0082?

{'name': 'ADV-2007-0010', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0010'}, {'name': 'imgallery-start1-file-upload(31237)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31237'}, {'name': '3049', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3049'}, {'name': '21827', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21827'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0082?


Explain the CVE ID: What does the identifier CVE-2007-0083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0083.

Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure."  NOTE: it could be argued that this is an issue in Shockwave instead of Nuked Klan.


Provide references for further information: Can you share references or external links related to CVE-2007-0083?

{'name': '21850', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/21850'}, {'name': '2101', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2101'}, {'name': '33368', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33368'}, {'name': '20070102 Nuked Klan <= 1.7 Remote Cookie Disclosure Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455726/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0083?


Explain the CVE ID: What does the identifier CVE-2007-0084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0084.

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename.  NOTE: this issue has been disputed by a reliable third party who states that the compiler is not a privileged program, so privilege boundaries cannot be crossed


Provide references for further information: Can you share references or external links related to CVE-2007-0084?

{'name': '20070103 Re: Windows NT Message Compiler 1.00.5239 arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455789/100/0/threaded'}, {'name': '37817', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/37817'}, {'name': '20070102 Windows NT Message Compiler 1.00.5239 arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/455729/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0084?


Explain the CVE ID: What does the identifier CVE-2007-0085 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0085.

Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP device is being used, allows local users to gain privileges via unspecified vectors, possibly related to agp_ioctl NULL pointer reference.