Lucene search
+L

661 matches found

OSV
OSV
•added 2015/01/15 3:59 p.m.•16 views

DEBIAN-CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

6.4CVSS7.2AI score0.02791EPSS
SaveExploits1References1
NVD
NVD
•added 2015/01/15 3:59 p.m.•29 views

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

6.4CVSS6.7AI score0.02791EPSS
SaveExploits1References5
Prion
Prion
•added 2015/01/15 3:59 p.m.•21 views

Directory traversal

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

6.4CVSS7.2AI score0.02791EPSS
SaveExploits1References5Affected Software2
UbuntuCve
UbuntuCve
•added 2015/01/15 3:59 p.m.•25 views

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

6.4CVSS5.9AI score0.02791EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2015/01/15 3:00 p.m.•41 views

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

6.5AI score0.02791EPSS
SaveExploits1References5
CNVD
CNVD
•added 2015/01/06 12:00 a.m.•20 views

gcab 'gcab-folder.c' local directory traversal vulnerability

gcab is a set of Microsoft Cabinet file processing tools. The tools list, extract and create compressed .cab files. A local directory traversal vulnerability exists in gcab 'gcab-folder.c'. Due to the program failing to adequately filter user-supplied input. Allowing a local attacker to access th...

6.4CVSS6.6AI score0.02791EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2014/10/27 12:00 a.m.•21 views

CA Antivirus Engine 8.1.637 CAB 缓冲区溢出漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•21 views

CA Antivirus Engine CAB Buffer Overflow

No description provided by source. $Id: cacab.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
CVE
CVE
•added 2014/01/29 2:00 a.m.•77 views

CVE-2013-6748

CVE-2013-6748 describes a buffer overflow in the ActiveX control qp2.dll (qp2.cab) of IBM Lotus Quickr for Domino 8.5.1, prior to 8.5.1.42-001b. Successful exploitation via a crafted HTML document enables remote arbitrary code execution. This entry is distinct from CVE-2013-6749 (which covers a s...

7.5CVSS7.5AI score0.03126EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/29 12:00 a.m.•3 views

CVE-2013-6749: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6748...

7.5CVSS6.6AI score0.0398EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/29 12:00 a.m.•4 views

CVE-2013-6748: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749...

7.5CVSS6.6AI score0.03126EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
•added 2013/12/15 12:00 a.m.•35 views

Cisco WAAS Mobile Server ReportReceiver CAB Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CISCO WAAS Mobile Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of CAB files uploaded through ReportReceiver. By uploading a...

7.5CVSS4.2AI score0.02023EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
•added 2013/10/07 12:00 a.m.•35 views

IBM Lotus Quickr qp2.cab ActiveX Control Integer Overflow (CVE-2013-3026)

A buffer overflow vulnerability exists in IBM Lotus Quickr for Domino. The vulnerability is due to an integer overflow within the qp2.cab ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a crafted web page using Internet Explorer. Successful...

9.3CVSS7.3AI score0.02898EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/06/27 12:00 a.m.•35 views

Symantec Mail Security for Exchange / Domino RAR and CAB Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

9.3CVSS5.9AI score0.05957EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2013/06/27 12:00 a.m.•39 views

Symantec Antivirus Scan Engine RAR and CAB Parsing Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

9.3CVSS5.9AI score0.05957EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2013/06/27 12:00 a.m.•34 views

Symantec Mail Security for SMTP RAR and CAB Parsing Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

9.3CVSS5.9AI score0.05957EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/06/17 12:00 a.m.•2 views

CVE-2013-3026: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site...

9.3CVSS6.6AI score0.02898EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
•added 2013/03/21 12:00 a.m.•4 views

Sophos Anti-Virus CAB Files Invalid typeCompress Parsing Heap Buffer Overflow - Improved Performance

A buffer overflow vulnerability has been reported in Sophos Anti-Virus. The vulnerability is due to an error in the way the application handles invalid values. A remote attacker could exploit this vulnerability by causing the affected application to process a specially crafted CAB file. Successfu...

2.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2012/11/22 12:00 a.m.•29 views

Symantec Products CAB Files Memory Corruption Vulnerability

This host is installed with Symantec Product and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecprdtscabfilesmemcorrvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Symantec Products CAB Files Memory Corruption Vulnerability Authors: Rachana Shetty Copyright:...

9.3CVSS0.5AI score0.06045EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2012/11/22 12:00 a.m.•32 views

Symantec Products CAB Files Memory Corruption Vulnerability

Symantec Product is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.7AI score0.06045EPSS
SaveExploits0References4
Rows per page
Query Builder