CVE-2006-4337

Buffer overflow in the maketable function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive...

CVE-2006-4338

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service infinite loop via a crafted GZIP archive...

CVE-2006-4338

CVE-2006-4338 affects gzip 1.3.5 (LHZ decompression in unlzh.c). The vulnerability allows context-dependent attackers to trigger an infinite loop in processing a crafted GZIP archive, leading to denial of service. Connected sources confirm the root cause in the LHZ decompression path and note DoS...

CVE-2006-4338

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service infinite loop via a crafted GZIP archive...

CVE-2006-4337

Buffer overflow in the maketable function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive...

CVE-2006-4334

Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service crash via a crafted GZIP gz archive, which results in a NULL dereference...

Moderate: Red Hat Security Advisory: gzip security update

Updated gzip packages that fix several security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package contains the GNU gzip data compression program. Tavis Ormandy of the Google...

multiple vulnerabilities in lha

Buffer overflow in the maketable function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive...

security flaw

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service infinite loop via a crafted GZIP archive...

security flaw

Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service crash via a crafted GZIP gz archive, which results in a NULL dereference...

gzip contains an infinite loop vulnerability in its LZH handling

Overview The gzip program contains a infinite loop vulnerability that may allow an attacker to create a denial-of-service condition. Description The gzip program is used to compress and decompress archived files. A infinite loop vulnerability exists in the way gzip handles certain files. An...

CVE-2006-4338

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service infinite loop via a crafted GZIP archive...

CVE-2006-4337

Buffer overflow in the maketable function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive...

CVE-2006-4335

Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GZIP archive that triggers an...

mybbxss.txt

Hello Title : MyBB Full path and Cross site scripting vulnerabilities Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] xss archive/index.php/forum-4.html?GLOBALS=1&navbitsname=33&navbitsname=alertdocument.cookie; full path inc/plugins/hello.p...

CVE-2006-4663

The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions 0666 and 0777 for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel compilation. NOTE:...

CVE-2006-4663

The CVE-2006-4663 entry concerns weak permissions (0666/0777) in the Linux kernel source tarballs for 2.6.16 through 2.6.17.11, potentially allowing a local user to insert Trojan horse source code that could be used when the kernel is next compiled. Primary details from connected documents indica...

CVE-2006-4663

The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions 0666 and 0777 for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel compilation. NOTE:...

CVE-2006-2482

Heap-based buffer overflow in the TZipTV component in 1 ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, 2 PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE:...

Heap overflow

Heap-based buffer overflow in the TZipTV component in 1 ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, 2 PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE:...