51 matches found
CVE-2016-7166
CVE-2016-7166 affects libarchive. The issue arises when processing gzip files: libarchive 3.x allows unlimited recursive decompressions, leading to memory exhaustion and potential application crash (Denial of Service). Affected: libarchive prior to 3.2.0. Impact is a resource exhaustion DoS; no e...
CVE-2016-7166
libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted gzip file...
CentOS Update for libarchive CESA-2016:1850 centos6
Check the version of libarchive SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882557";...
PT-2016-7166 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue concerns a problem in Adobe Flash Player. No specific details about the nature of the issue, affected devices, or real-world incidents are provided. Recommendations: At...
[SECURITY] [DLA 617-1] libarchive security update
Package : libarchive Version : 3.0.4-3+wheezy3 CVE ID : CVE-2015-8915 CVE-2016-7166 Debian Bug : 784213 Several security vulnerabilities have been discovered in libarchive, a multi-format archive and compression library. An attacker could take advantage of these flaws to cause an out of bounds re...
Fedora Update for python-jinja2 FEDORA-2014-7166
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-6310
creationtimestamp| type| source ---|---|--- 2008-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7163 2008-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7166...
CVE-2008-6309
creationtimestamp| type| source ---|---|--- 2008-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7163 2008-11-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7166...
CVE-2006-7166
IBM WebSphere Application Server WAS 5.1.1.9 and earlier allows remote attackers to obtain JSP source code and other sensitive information via "a specific JSP URL."...
CVE-2006-7166
CVE-2006-7166 affects IBM WebSphere Application Server (WAS) 5.1.1.9 and earlier. A remote attacker can obtain JSP source code and other sensitive information through a specific JSP URL. The provided documents do not specify the root cause details beyond this access to JSP content, nor do they in...