9873 matches found
CVE-2008-2722
CVE-2008-2722 : Menalto Gallery before 2.2.5 is vulnerable to a permission bypass where remote attackers can bypass permissions for sub-albums via a ZIP archive. The connected Fedora/OpenVAS entries indicate the issue was addressed by upgradingGallery2 to 2.2.5 (e.g., Fedora 8/9 updates 2008-5479...
CVE-2008-2722
Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...
Design/Logic Flaw
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...
CVE-2008-2575
CVE-2008-2575 affects the cbrPager utility. The vulnerability allows user-assisted remote code execution via shell metacharacters in archive filenames for image archives (ZIP/.cbz and RAR/.cbr). Affected version: cbrPager before 0.9.17. The issue arises from filenames being passed to decompressio...
CVE-2008-2575
cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...
[SECURITY] Fedora 8 Update: cbrpager-0.9.17-2.fc8
A no-nonsense, simple to use, small viewer for cbr and cbz comic book archive files. As it is written in C, the executable is small and fast. It views jpg or jpeg, gif and png images, and you can zoom in and out...
[SECURITY] Fedora 9 Update: cbrpager-0.9.17-2.fc9
A no-nonsense, simple to use, small viewer for cbr and cbz comic book archive files. As it is written in C, the executable is small and fast. It views jpg or jpeg, gif and png images, and you can zoom in and out...
LHa Vuffer Overflow Vulnerability in Testing and Extracting Process
Overview LHa for UNIX does not handle the header length information properly when testing or extracting an archive, which could lead to buffer overflow. Impact An attacker could execute arbitrary code with the privilege of the user running LHa. Solution Please refer to the 'Vendor Information'...
LHA Arbitrary Command Execution Vulnerability with Shell Metacharacter in Directory Name
Overview LHA is vulnerable to arbitrary command execution due to improper handling of directory names cantaining shell metacharacters. Impact An remote attacker could execute arbitrary command. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...
LHA Buffer Overflow Vulnerability with lack of Path Length Validation
Overview LHA is vulnerable to buffer overflow due to improper handling of a pathname in the LHarc Format 2 header for an .LHZ archive. Impact An remote attacker coulf execute arbitrary code. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate...
Lhaca LHZ Archive Extended Header Size Processing Buffer Overflow Vulnerability
Overview Lhaca does not process an LHZ archive with an invalid Extended Header Size properly, which could lead to buffer overflow. This problem is reported to be different from the issue identified in JVNDB-2007-000492 CVE-2007-3375. Impact An attacker could execute arbitrary code. Solution Pleas...
McAfee VirusScan Engine buffer overflow vulnerability
Overview McAfee VirusScan Engine contains a buffer overflow vulnerability. Impact A buffer overflow may occur when scanning a malformed LHA file. Solution None...
McAfee VirusScan Engine buffer overflow vulnerability
Overview McAfee VirusScan Engine contains a buffer overflow vulnerability. Impact A buffer overflow may occur when scanning a malformed LHA file. Solution None...
Unfixed XSS vulnerability at www.grozny-inform.ru
Security researcher DaiMon, has submitted on 19/05/2008 a cross-site-scripting XSS vulnerability affecting www.grozny-inform.ru, which at the time of submission ranked 646715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is...
Heap overflow
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive...
CVE-2008-2021
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive...
CVE-2008-2021
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment field in a ZOO archive...
CVE-2008-1866
admin/modifconfig.php in Blog Pixel Motion aka PixelMotion does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct...
