CVE-2007-5048

Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...

CVE-2007-5048

Lhaplus vulnerability (CVE-2007-5048): heap-based buffer overflow in Lhaplus before 1.55 when handling ARJ archives, triggered by a long filename. ARJ filenames can overflow the buffer, allowing remote code execution with the user’s privileges if a crafted file is opened. Affected product: Lhaplu...

CVE-2007-5048: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive...

F-Secure Antivirus buffer overflow

Buffer overflow on LZH archives parsing. Infinite loop on ARJ and FSG parsing...

n.runs-SA-2007.014 - F-Secure Antivirus ARJ parsing Infinite Loop Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.014 04-Jun-2007 Vendor: F-Secure Corporation, http://www.f-secure.com Affected Products: F-Secure Anti-Virus for Workstations version 7.00 and earlier F-Secure Anti-Virus for Windows Servers version 7.00 and earlier F-Secure...

CVE-2007-2967

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

Design/Logic Flaw

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

CVE-2007-2967

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

CVE-2007-2967

The CVE-2007-2967 entry affects multiple F‑Secure antivirus products for Windows and Linux prior to 20070522. The vulnerability is a denial of service via crafted ARJ archives or FSG packed files that can cause a file-scanning infinite loop within the scanner component. Impact is a complete denia...

CVE-2007-2967: Improper Input Validation

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service file scanning infinite loop via certain crafted 1 ARJ archives or 2 FSG packed files...

Kaspersky AntiVirus杀毒引擎ARJ文档解析堆溢出漏洞

CVECAN ID: CVE-2007-0445 Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky Antivirus的杀毒引擎在处理ARJ文档格式时存在堆溢出漏洞，如果使用该引擎的杀毒软件扫描了恶意文档的话就会触发这个溢出，可能导致执行任意指令。 来源：ZDI （http://www.zerodayinitiative.com/） 链接：http://www.zerodayinitiative.com/advisories/ZDI-07-013.html http://www.kaspersky.com/technews?id=203038693...

CVE-2007-0445

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...

Heap overflow

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...

[Full-disclosure] ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability

ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow http://www.zerodayinitiative.com/advisories/ZDI-07-013.html April 5, 2007 -- CVE ID: CVE-2007-0445 -- Affected Vendor: Kaspersky -- Affected Products: Anti-Virus 6.0 Internet Security 6.0 Anti-Virus for Workstation File Serv...

CVE-2007-0445

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...

CVE-2007-0445: Undefined Security Weakness

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...

Multiple Kaspersky Antivirus / Internet Security security vulnerabilities

Multiple unsafe ActiveX methods allows files uploading from vulnerable host. Buffer overflow on ARJ files parsing. Local driver buffer overflow...

Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with affected installations of the Kaspersky Anti-Virus Engine. User interaction is not required to exploit this vulnerability. The specific flaw exists in the engine's handling of the ARJ archive format. The Kaspersk...

7-Zip ARJ File Handling Overflow

The remote host contains a version of the open source 7-Zip file archiver and included in third-party products such as Knownsoft's Turbo Searcher. The version of this software installed on the remote host contains a buffer overflow in its ARJ file handling library that is triggered when handling ...

Knownsoft Turbo Searcher ARJ文件处理栈溢出漏洞

Turbo Searcher是一款快速进行文件搜索的工具，可以用文件名、文件夹、时间、大小等搜索任何文件。 Turbo Searcher所使用的7-Zip ARJ插件（arj.dll）中存在栈溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗对包含有恶意ARJ文档的目录执行了搜索的话，同时禁用了“Quick Search”选项且启用了“Search in compressed file”选项，就会触发这个漏洞，导致执行任意代码。 Knownsoft Turbo Searcher 3.30 build 052705...