USN-632-1: Python vulnerabilities

It was discovered that there were new integer overflows in the imageop module. If an attacker were able to trick a Python application into processing a specially crafted image, they could execute arbitrary code with user privileges. CVE-2008-1679 Justin Ferguson discovered that the zlib module di...

F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service

F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service $ /opt/f-prot/fpscan snot.zip F-PROT Antivirus version 6.2.1.4252 built: 2008-04-28T16-44-10 FRISK Software International C Copyright 1989-2007 Engine version: 4.4.4.56 Virus signatures:...

F-PROT antivirus 6.2.1.4252 (malformed archive) Infinite Loop DoS

Exploit for multiple platform in category dos / poc ========================================================================= F-PROT antivirus 6.2.1.4252 malformed archive Infinite Loop DoS Exploit ========================================================================= $ /opt/f-prot/fpscan...

F-PROT AntiVirus 6.2.1.4252 - Malformed Archive Infinite Loop Denial of Service

$ /opt/f-prot/fpscan snot.zip F-PROT Antivirus version 6.2.1.4252 built: 2008-04-28T16-44-10 FRISK Software International C Copyright 1989-2007 Engine version: 4.4.4.56 Virus signatures: 200806021748d9e53873896ea96bd4e8a470344c25b5 /opt/f-prot/antivir.def Scanning: - ^^ at this point the scanner...

Firefox arbitrary signed JAR code execution

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via 1 injection of JavaScript into documents within a JAR archive or 2 a JAR archive that uses relative URLs to JavaScript files...

Firefox arbitrary signed JAR code execution

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute arbitrary code via 1 injection of JavaScript into documents within a JAR archive or 2 a JAR archive that uses relative URLs to JavaScript files...

cbrPager shell characters vulnerability

Shell characters vulnerability in archive filenames...

CVE-2008-2722

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...

Design/Logic Flaw

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...

CVE-2008-2722

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...

CVE-2008-2722

CVE-2008-2722 : Menalto Gallery before 2.2.5 is vulnerable to a permission bypass where remote attackers can bypass permissions for sub-albums via a ZIP archive. The connected Fedora/OpenVAS entries indicate the issue was addressed by upgradingGallery2 to 2.2.5 (e.g., Fedora 8/9 updates 2008-5479...

CVE-2008-2722

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...

Design/Logic Flaw

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...

CVE-2008-2575

cbrPager before 0.9.17 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a 1 ZIP aka .cbz or 2 RAR aka .cbr archive filename...

CVE-2008-2575

CVE-2008-2575 affects the cbrPager utility. The vulnerability allows user-assisted remote code execution via shell metacharacters in archive filenames for image archives (ZIP/.cbz and RAR/.cbr). Affected version: cbrPager before 0.9.17. The issue arises from filenames being passed to decompressio...

[SECURITY] Fedora 8 Update: cbrpager-0.9.17-2.fc8

A no-nonsense, simple to use, small viewer for cbr and cbz comic book archive files. As it is written in C, the executable is small and fast. It views jpg or jpeg, gif and png images, and you can zoom in and out...

[SECURITY] Fedora 9 Update: cbrpager-0.9.17-2.fc9

A no-nonsense, simple to use, small viewer for cbr and cbz comic book archive files. As it is written in C, the executable is small and fast. It views jpg or jpeg, gif and png images, and you can zoom in and out...

Lhaca LHZ Archive Extended Header Size Processing Buffer Overflow Vulnerability

Overview Lhaca does not process an LHZ archive with an invalid Extended Header Size properly, which could lead to buffer overflow. This problem is reported to be different from the issue identified in JVNDB-2007-000492 CVE-2007-3375. Impact An attacker could execute arbitrary code. Solution Pleas...

McAfee VirusScan Engine buffer overflow vulnerability

Overview McAfee VirusScan Engine contains a buffer overflow vulnerability. Impact A buffer overflow may occur when scanning a malformed LHA file. Solution None...

McAfee VirusScan Engine buffer overflow vulnerability

Overview McAfee VirusScan Engine contains a buffer overflow vulnerability. Impact A buffer overflow may occur when scanning a malformed LHA file. Solution None...