AutoVue SolidModel Professional archiver multiple buffer overflows

Buffer overflows on multiple archive formats handling...

CVE-2006-3845

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive...

CVE-2006-3845

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive...

[Full-disclosure] [vuln.sg] DynaZip DZIP32.DLL/DZIPS32.DLL Buffer Overflow Vulnerabilities

vuln.sg Vulnerability Research Advisory DynaZip DZIP32.DLL/DZIPS32.DLL Buffer Overflow Vulnerabilities by Tan Chew Keong Release Date: 2006-07-25 Summary ------- Some vulnerabilities have been found in DynaZip DZIP32.DLL/DZIPS32.DLL. When exploited, the vulnerabilities allow execution of arbitrar...

TurboZIP buffer overflow

Buffer overflow on corrupted archive repair...

[Full-disclosure] [vuln.sg] PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability

vuln.sg Vulnerability Research Advisory PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-07-25 Summary ------- A vulnerability has been found in PowerArchiver. When exploited, the vulnerability allows execution of arbitrary code when the user adds a fil...

Secunia Research: BitZipper unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 17/07/2006 - BitZipper unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2006-3758

inc/init.php in Archive Mode Light in MyBB aka MyBulletinBoard 1.1.4 calls the extract function with EXTROVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the SERVERHTTPCLIENTIP parameter in...

CVE-2006-3766

Darren's $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a txtrating parameter with a score greater than the intended maximum of 10...

CVE-2006-3766

The CVE-2006-3766 entry affects Darren's $5 Script Archive osDate, specifically versions 1.1.7 and earlier. The vulnerability arises in the txtrating parameter, where a score can be set higher than the intended maximum of 10, enabling users to boost their own ratings. The available connected docu...

WinRAR 3.60 Beta 6 - SFX Path Stack Overflow

WinRAR 3.60 Beta 6 - SFX Path Stack Overflow """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Author.............: posidron An SFX SelF-eXtracting archive is an archive, merged with an executabl...

CentOS 3 / 4 : cpio (CESA-2005:378)

An updated cpio package that fixes multiple issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A race condition bug was found in cpio. It is possible for a local...

CentOS 3 : tar (CESA-2006:0195)

An updated tar package that fixes a path traversal flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that...

CVE-2006-3326

The CVE-2006-3326 entry describes a directory-traversal vulnerability in QuickZip 3.06.3 where remote attacker-controlled dot-dot sequences in filenames inside TAR, GZ, and JAR archives can cause overwriting of arbitrary files or directories. The root cause is improper handling of archive filenam...

CVE-2006-3326

Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. dot dot sequences in filenames within 1 TAR,2 GZ, and 3 JAR archives. NOTE: the provenance of this information is unknown; the details are obtained solely...

mp3search.txt

MP3 Search/Archive v1.2 Homepage: http://www.bloodys.com Affected files: Search input box. index.php Data is not properally sanatized before its generated. For PoC try putting the code below in the search box: Screenshots: http://www.youfucktard.com/xsp/mp3search.jpg XSS vuln via res variable on...

CVE-2006-3173

Multiple PHP remote file inclusion vulnerabilities in ContentBuilder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathcb parameter to a libraries/comment/postComment.php and b modules/poll/poll.php, 2 rel parameter to c modules/archive/overview.inc.php, and the 3...

CVE-2006-3071

CVE-2006-3071 describes a cross-site scripting (XSS) vulnerability in index.php of MP3 Search/Archive 1.2, allowing an attacker to inject arbitrary script or HTML via the 1) keywords parameter used by the search box, and 2) res parameter. The provided sources identify the flaw but do not include ...

Stack overflow

Stack-based buffer overflow in the info tip shell extension zipinfo.dll in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an 1 ACE, 2 RAR, or 3 ZIP archive, which is triggered when the user moves the mouse over the archive...

CVE-2006-2909

Stack-based buffer overflow in the info tip shell extension zipinfo.dll in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an 1 ACE, 2 RAR, or 3 ZIP archive, which is triggered when the user moves the mouse over the archive...