Norman Virus Control LZH及.ACE文件解析缓冲区溢出漏洞

BUGTRAQ ID: 25003,25015 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control的文件解析引擎没有正确的解析.LZH和.ACE文件，如果用户受骗打开了畸形的.LZH或.ACE文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意指令。 Norman Virus Control = 5.90 Norman ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.norman.com/...

Buffer overflow

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...

CVE-2007-3951

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...

CVE-2007-3951

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...

Norman Antivirus multiple security vulnerabilities

Protection bypass with .DOC files, division by zero on DOC parsing, multiple buffer overflows on LZH and ACE archives parsing...

Heap overflow

Heap-based buffer overflow in mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE:...

CVE-2007-2417

CVE-2007-2417 concerns a heap-based overflow in Progress OpenEdge’s Progress server component _mprosrv.exe. The vulnerability affects Progress OpenEdge 9.1E and 10.1x (via the Progress server) and can be triggered by crafted TCP packets received on the server, leading to potential remote code exe...

KLA10350 Vulnerabilities in Symantec

Unspecified vulnerabilities were found in Symantec AntiVirus. By exploiting these vulnerabilities malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via specially designed CAB or RAR archives. Original advisories Symantec bulletin...

KLA10057 ACE vulnerability in Servant Salamander

A buffer overflow vulnerability was found in Servant Salamander. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to peviewer.spl via a specially designed PE file. Original advisories vulnerability...

Seh over write

Hey i was wondering if any one would be able to help i have a few question's.About over writing the seh handler's.I have wrote a poc code for an buffer over flow..The problem was i didn't over write the eip but did write to a few registers also there is a few that hold the buffer..My question is....

Ace-FTP FTP client buffer overflow

Buffer overflow on parsing server banner...

Buffer overflow

Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long response...

CVE-2007-3164

Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if t...

Authentication flaw

Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if t...

CVE-2007-3161

Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long response...

CVE-2007-3161

CVE-2007-3161 affects Ace-FTP Client 1.24a. The vulnerability is a buffer overflow in the client triggered by a long response from a remote FTP server, allowing user-assisted remote code execution. The available connected documents confirm the product/version and the underlying issue (buffer over...

CVE-2007-3161

Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long response...

Ace-FTP Client 1.24a Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/python Credit to n00b for finding the bug. Ace-Ftp client buffer over flow p0c. This is possible to exploit as we Smash the seh handlers and there are Plenty of registers that had our buffer Im still new to seh over writes I haven't Had much experience...

Ace-FTP Client 1.24a - Remote Buffer Overflow (PoC)

!/usr/bin/python Credit to n00b for finding the bug. Ace-Ftp client buffer over flow p0c. This is possible to exploit as we Smash the seh handlers and there are Plenty of registers that had our buffer Im still new to seh over writes I haven't Had much experience with the seh over write But get th...

Ace-FTP Client 1.24a - Remote Buffer Overflow (PoC)

Ace-FTP Client 1.24a - Remote Buffer Overflow PoC !/usr/bin/python Credit to n00b for finding the bug. Ace-Ftp client buffer over flow p0c. This is possible to exploit as we Smash the seh handlers and there are Plenty of registers that had our buffer Im still new to seh over writes I haven't Had...