CVE-2010-2800

The CVE-2010-2800 entry concerns cabextract (libmspack) with a vulnerability in the MS-ZIP decompressor. The issue allows a remote attacker to trigger a denial-of-service (infinite loop) when processing a malformed MSZIP archive inside a .cab file, during either test or extract actions. The descr...

CVE-2010-2801

CVE-2010-2801 (cabextract, related libmspack/Quantum decompressor) suffers an integer signedness error in the Quantum decompressor when testing archives, potentially enabling a remote attacker to cause a crash or execute arbitrary code via a crafted .cab file. Affected versions are cabextract pri...

CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

[SECURITY] [DSA 2087-1] New cabextract packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-2087-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 04, 2010 http://www.debian.org/security/faq -...

Microsoft Windows MFC Document Title Updating Buffer Overflow (MS10-074)

The Microsoft Foundation Class Library MFC is a library that wraps portions of the Windows API in C++ classes, including functionality that enables them to use a default application framework. A stack buffer overflow vulnerability has been reported in Microsoft Windows MFC library mfc42.dll. The...

Apple iOS - .pdf Local Privilege Escalation Jailbreak

Apple iOS - .pdf Local Privilege Escalation Jailbreak The files contained in the archive link below are those that make use of a pdf exploit in order to jailbreak devices running Apple iOS. These pdf's are of interest in that they originate in userland and give root access to the devices...

Apple iOS - '.pdf' Local Privilege Escalation 'Jailbreak'

The files contained in the archive link below are those that make use of a pdf exploit in order to jailbreak devices running Apple iOS. These pdf's are of interest in that they originate in userland and give root access to the devices...

Данные из взломанного процессинга Хронопэй

Ровно неделя прошла с момента опубликования заявления группы хакеров о взломе платежной системы «Chronopay», краже массива кредитных карт http://chronoplay.livejournal.com/586.html и личных данных миллионов россиян. Поскольку официальные лица компании продолжают делать вид, что ничего не произошл...

RHEL 4 / 5 : perl-Archive-Tar (RHSA-2010:0505)

An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 4 / 5 : perl-Archive-Tar (CESA-2010:0505)

An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

perl security update

CentOS Errata and Security Advisory CESA-2010:0505 An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability...

Panda AntiVirus Zoo Denial of Service Vulnerability

Panda Software Antivirus/Internet Security before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced...

Perl Archive::Tar Module Remote Directory Traversal Vulnerability

Perl Archive::Tar module is prone to a directory-traversal vulnerability because it fails to validate user-supplied data. A successful attack can allow the attacker to overwrite files on a computer in the context of the user running the affected application. Successful exploits may aid in further...

Perl Archive::Tar Module Remote Directory Traversal Vulnerability

Perl Archive::Tar module is prone to a directory-traversal vulnerability because it fails to validate user-supplied data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

RedHat Update for perl-Archive-Tar RHSA-2010:0505-01

Check for the Version of perl-Archive-Tar OpenVAS Vulnerability Test RedHat Update for perl-Archive-Tar RHSA-2010:0505-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Update for perl-Archive-Tar RHSA-2010:0505-01

Check for the Version of perl-Archive-Tar OpenVAS Vulnerability Test RedHat Update for perl-Archive-Tar RHSA-2010:0505-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

perl-Archive-Tar directory traversal flaws

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

Moderate: Red Hat Security Advisory: perl-Archive-Tar security update

An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

perl-Archive-Tar security update

1.39.1-1.el5.1 - cleaning spec and nvr - Related: rhbz595733 1.40-1.el5.1 - update to real version 1.3901, but for rpm updates, it will be 1.40 - Resolves: rhbz595733 1.40-1 - update to 1.40 - Resolves: rhbz595733...