CVE-2006-2085

Multiple buffer overflows in 1 CxAce60.dll and 2 CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename...

KLA10338 ACE vulnerability in SpeedProject

Buffer overflows were found in SpeedProject products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE file. Original advisories - Related products Speedproject-SpeedCommander Speedproject-Squeez...

Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 28/04/2006 - Servant Salamander unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

SpeedProject multiple archiver buffer overflow

Buffer overflows on ZIP, ACE and UUEncode formats parsing...

Secunia Research: SpeedProject Products ACE Archive Handling Buffer Overflow

====================================================================== Secunia Research 26/04/2006 - SpeedProject Products ACE Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

[SA19473] SpeedProject Products ACE Archive Handling Buffer Overflow

TITLE: SpeedProject Products ACE Archive Handling Buffer Overflow SECUNIA ADVISORY ID: SA19473 VERIFY ADVISORY: http://secunia.com/advisories/19473/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Speedproject SpeedCommander 10.x http://secunia.com/product/6185/...

[SA19454] Total Commander unacev2.dll Buffer Overflow Vulnerability

TITLE: Total Commander unacev2.dll Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19454 VERIFY ADVISORY: http://secunia.com/advisories/19454/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Total Commander 6.x http://secunia.com/product/3312/ DESCRIPTION: A...

KLA10254 ACE vulnerabilities in Adobe Flash Player

Multiple unspecified vulnerabilities were found in Flash Player. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed SWF file. Original advisories - Related products Adobe-Flash-Player-ActiveX...

KLA10363 ACE vulnerability in The Bat!

A buffer overflow was found in The Bat! By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed e-mail. Original advisories - Related products The-Bat! CVE list CVE-2006-0918 high Solution Update to latest...

KLA10152 ACE vulnerability in SFTP

A format string was found in the multiple SFTP products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products SSH-Secure-Shell-for-Workstations F-Secure-SSH-for-Windows...

KLA10324 ACE vulnerability in Shareaza

Integer overflows were found in Shareaza. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Related products Shareaza CVE list CVE-2006-0474 high Solution Update to lates...

KLA10088 ACE vulnerability in BitComet

A buffer overflow was found in the BitComet. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed publisher URI. Original advisories - Related products BitComet-Client CVE list CVE-2006-0339 high...

KLA10133 ACE vulnerabilities in IBM DB2

Multiple buffer overflows was found in the IBM DB2. By using this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via a specially designed libname, environment variable or parameter. Original advisories - Related products DB2-Universal-Databas...

VMware vulnerability in NAT networking

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VULNERABILITY SUMMARY A vulnerability has been discovered in vmnat.exe on Windows hosts and vmnet-natd on Linux systems. The vulnerability makes it possible for a malicious guest using a NAT networking configuration to execute unwanted code on the hos...

CVE-2005-4459

The CVE-2005-4459 issue is a heap-based buffer overflow in VMware’s NAT service components vmnat.exe and vmnet-natd across several products (Workstation 5.5, GSX Server 3.2, ACE 1.0.1, Player 1.0). The flaw is triggered by malformed FTP PORT and EPRT commands processed by the NAT service, allowin...

GLSA-200511-10 : RAR: Format string and buffer overflow vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-10 RAR: Format string and buffer overflow vulnerabilities Tan Chew Keong reported about two vulnerabilities found in RAR: A format string error exists when displaying a diagnostic error message that informs the user of an...

RAR: Format string and buffer overflow vulnerabilities

Background RAR is a powerful archive manager that can decompress RAR, ZIP and other files, and can create new archives in RAR and ZIP file format. Description Tan Chew Keong reported about two vulnerabilities found in RAR: A format string error exists when displaying a diagnostic error message th...

CVE-2005-3317

Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via 1 a ZIP archive that contains a file with a long filename, which is not properly handled by a zipgenius.exe, b zg.exe, c...

CVE-2005-3317

CVE-2005-3317 affects ZipGenius: multiple stack-based buffer overflows in ZipGenius 5.5.1.468, 6.0.2.1041 and earlier than 6.0.2.1050. Vulnerable components include zipgenius.exe, zg.exe, zgtips.dll, contmenu.dll (ZIP long filenames); zipgenius.exe can mishandle long original names in UUE/XXE/MIM...

CVE-2005-3317

Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via 1 a ZIP archive that contains a file with a long filename, which is not properly handled by a zipgenius.exe, b zg.exe, c...