CVE-2007-0445

CVE-2007-0445 describes a heap-based buffer overflow in the arj.ppl module of the Kaspersky OnDemand Scanner engine (used by Kaspersky Anti-Virus/Internet Security products). The flaw occurs while processing ARJ archives, where data is copied into an unchecked heap-based buffer, allowing remote a...

[Full-disclosure] ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability

ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow http://www.zerodayinitiative.com/advisories/ZDI-07-013.html April 5, 2007 -- CVE ID: CVE-2007-0445 -- Affected Vendor: Kaspersky -- Affected Products: Anti-Virus 6.0 Internet Security 6.0 Anti-Virus for Workstation File Serv...

CVE-2005-0445

Open WebMail 2.x is affected by a Cross-Site Scripting (XSS) vulnerability in the logindomain parameter on the login page. The Open WebMail OpenVAS/Nessus entries confirm that insufficient validation of the logindomain input enables arbitrary script execution in a user’s browser. Related referenc...

CVE-2002-0445

The CVE concerns article.php in PHP FirstPost 0.1, where an invalid post number in the post parameter causes an error message that leaks the server’s full pathname. This constitutes an information disclosure vulnerability in the PHP FirstPost 0.1 package. The available records do not provide addi...

CVE-2002-0445

article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message...

CVE-2004-0445

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service CPU consumption...

CVE-2003-0445

Buffer overflow in webfs before 1.17.1 allows remote attackers to execute arbitrary code via an HTTP request with a long Request-URI...

CVE-2003-0445

CVE-2003-0445 describes a buffer overflow in the webfs HTTP server (pre-1.17.1). The affected product is webfs, a lightweight HTTP server for static content. The underlying issue is a buffer overflow triggered by a long HTTP Request-URI, which could allow a remote attacker to execute arbitrary co...

CVE-2000-0445

The CVE-2000-0445 issue affects PGP 5.x on Unix-like systems where non-interactive (batch) key generation via pgpk can use insufficient randomness collected from /dev/random. The root cause is how PGP v5.0 processes entropy when generating keys in unattended mode, potentially producing weak, pred...

CVE-2000-0445

The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys...

CVE-1999-0445

Cisco IOS releases running NAT on some 12.0-based versions may leak packets through input access-lists, due to a group of bugs in NAT-ACL interaction. Affected code paths involve NAT processing with input ACL filtering, potentially causing filters to appear to work while packets bypass them. Cisc...

CVE-1999-0445

In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters...