61 matches found
CVE-2006-0950
CVE-2006-0950 affects unalz 0.53. The vulnerability is a directory traversal in ALZ extraction, where filename paths containing .. can cause files to be written outside the intended directory. This is due to an input validation error during extraction. Affected component: unalz (ALZ archive handl...
CVE-2006-0950
unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...
CVE-2006-0950
unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." dot dot sequences in a filename...
[SECURITY] [DSA 959-1] New unalz packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 959-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2006 http://www.debian.org/security/faq -...
DSA-959-1 unalz - buffer overflow
Bulletin has no description...
CVE-2005-4786
Buffer overflow in the archive decompression library vrAZMain.dll 5.8.22.137, as used in HAURI anti-virus products including 1 ViRobot Expert 4.0, 2 ViRobot Advanced Server, and 3 HAURI LiveCall, allows user-assisted attackers to execute arbitrary code via an ALZ archive containing a file with a...
CVE-2005-3862
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
CVE-2005-3862
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
CVE-2005-3862
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
CVE-2005-3862
CVE-2005-3862 affects the unalz decompressor for ALZ archives. Debian advisories (DSA-959-1) document a buffer overflow caused by insufficient bounds checking when parsing file names, enabling arbitrary code execution via a crafted ALZ archive. Remediation in provided docs: upgrade unalz to versi...
CVE-2005-3862
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
CVE-2005-3862
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
CVE-2005-3862: Undefined Security Weakness
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
Unalz 0.x - Archive Filename Buffer Overflow
Unalz 0.x - Archive Filename Buffer Overflow source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit th...
Unalz 0.x - Archive Filename Buffer Overflow
source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit this vulnerability to execute arbitrary code in...
CVE-2005-3284
Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted 1 ALZ, 2 UUE, or 3 XXE archives...
CVE-2005-3284
Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted 1 ALZ, 2 UUE, or 3 XXE archives...
CVE-2005-3284
CVE-2005-3284 affects AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3. The issue arises from multiple buffer overflows when compressed file scanning is enabled, allowing remote attackers to execute arbitrary code via crafted archives (ALZ, ...
CVE-2005-3194: Undefined Security Weakness
Multiple buffer overflows in ALZip 6.12 Korean, 6.1 International, and 5.52 English allow remote attackers to execute arbitrary code via a long filename in a compressed 1 ALZ, 2 ARJ, 3 ZIP, 4 UUE, or 5 XXE archive...