ESET NOD32 Archive support module heap buffer overflow vulnerability

ESET NOD32 is a suite of antivirus programs from ESET Slovakia. A heap buffer overflow vulnerability exists in the Archive support module of ESET NOD32 update prior to version 11861. A remote attacker can exploit this vulnerability to execute arbitrary code with the help of a large number of...

CVE-2015-8841

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

Heap overflow

Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SISFILEMULTILANG...

CVE-2016-0709

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. dot dot in a ZIP archive entry, as demonstrated by...

Directory traversal

Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. dot dot in a ZIP archive entry...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE...

CAM UnZip 5.1 - .ZIP File Directory Traversal

CAM UnZip 5.1 - .ZIP File Directory Traversal + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CAMUNZIP-ARCHIVE-PATH-TRAVERSAL.txt Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type:...

CAM UnZip 5.1 - .'ZIP' File Directory Traversal

Exploit for windows platform in category local exploits + Credits: hyp3rlinx Vendor: ================= www.camunzip.com Product: ============== CAM UnZip v5.1 Vulnerability Type: ====================== Archive Path Traversal CVE Reference: ============== N/A Vulnerability Details:...

ric.edu XSS vulnerability

Vulnerable URL: http://www.ric.edu/ric150/historicalTodayArchive02.php?id=118%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

PT-2016-1797 · Eset · Eset Nod32 Antivirus

Name of the Vulnerable Software and Affected Versions: ESET NOD32 versions before update 11861 Description: The issue is related to a heap-based buffer overflow in the Archive support module. This can be exploited by remote attackers to execute arbitrary code via a large number of languages in an...

Lhasa Integer Overflow Vulnerability

Lhasa is a freeware alternative to the LHA compression program for Unix, developed by software developer Simon Howard. The program is capable of decompressing .lzh and .lzs files. An integer overflow vulnerability exists in the 'decodelevel3header' function in Lhasa's lib\lhafileheader.c file,...

Debian DSA-3540-1 : lhasa - security update

Marcin Noga discovered an integer underflow in Lhasa, a lzh archive decompressor, which might result in the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

DSA-3540-1 lhasa - security update

Bulletin has no description...

New Heap-Spray Exploit Tied To LZH Archive Decompression

Researchers found a vulnerability in the classic compression standard Lhasa, once a mainstay for game developers in the mid-’90s and still in use today. Researchers at Cisco’s security research arm, Cisco Talos, identified the vulnerability calling it as a classic heap-spray exploit. In a report...

Apache OpenMeetings 1.9.x 3.1.0 - .ZIP File Directory Traversal

Apache OpenMeetings 1.9.x 3.1.0 - .ZIP File Directory Traversal Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings 1.9.x - 3.1.0 Description: The Import/Export System Backups functionality in the OpenMeetings Administration menu...

Uber: XSS In archive.uber.com Due to Mime Sniffing in IE

archive.uber.com hosts a mirror of pypi at archive.uber.com/pypi/simple/. It mirrors all of the .tar.gz that are uploaded to pypi. The MIME type of all the .tar.gz files is application/octet-stream. Since the MIME type is not specified, browsers will automatically try to determine the type of the...

VulnCheck KEV: CVE-2012-3347

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment...

php: NULL pointer dereference in phar_get_fp_offset()

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...

php: Files from archive can be extracted outside of destination directory using phar

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...

php: segmentation fault in Phar::convertToData on invalid file

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...