661 matches found
DEBIAN-CVE-2015-0552
Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...
CVE-2015-0552
Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...
Directory traversal
Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...
CVE-2015-0552
Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...
CVE-2015-0552
Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...
gcab 'gcab-folder.c' local directory traversal vulnerability
gcab is a set of Microsoft Cabinet file processing tools. The tools list, extract and create compressed .cab files. A local directory traversal vulnerability exists in gcab 'gcab-folder.c'. Due to the program failing to adequately filter user-supplied input. Allowing a local attacker to access th...
CA Antivirus Engine 8.1.637 CAB 缓冲区溢出漏洞
No description provided by source...
CA Antivirus Engine CAB Buffer Overflow
No description provided by source. $Id: cacab.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2013-6748
CVE-2013-6748 describes a buffer overflow in the ActiveX control qp2.dll (qp2.cab) of IBM Lotus Quickr for Domino 8.5.1, prior to 8.5.1.42-001b. Successful exploitation via a crafted HTML document enables remote arbitrary code execution. This entry is distinct from CVE-2013-6749 (which covers a s...
CVE-2013-6749: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6748...
CVE-2013-6748: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749...
Cisco WAAS Mobile Server ReportReceiver CAB Processing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CISCO WAAS Mobile Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of CAB files uploaded through ReportReceiver. By uploading a...
IBM Lotus Quickr qp2.cab ActiveX Control Integer Overflow (CVE-2013-3026)
A buffer overflow vulnerability exists in IBM Lotus Quickr for Domino. The vulnerability is due to an integer overflow within the qp2.cab ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a crafted web page using Internet Explorer. Successful...
Symantec Mail Security for Exchange / Domino RAR and CAB Multiple Vulnerabilities
The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...
Symantec Antivirus Scan Engine RAR and CAB Parsing Multiple Vulnerabilities
The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...
Symantec Mail Security for SMTP RAR and CAB Parsing Multiple Vulnerabilities
The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...
CVE-2013-3026: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the Lotus Quickr for Domino ActiveX control in qp2.cab in IBM Lotus Quickr 8.1 before FP 8.1.0.32-001a, 8.2 before FP 8.2.0.28-001a, and 8.5.1 before FP 8.5.1.39-002a for Domino allows remote attackers to execute arbitrary code via a crafted web site...
Sophos Anti-Virus CAB Files Invalid typeCompress Parsing Heap Buffer Overflow - Improved Performance
A buffer overflow vulnerability has been reported in Sophos Anti-Virus. The vulnerability is due to an error in the way the application handles invalid values. A remote attacker could exploit this vulnerability by causing the affected application to process a specially crafted CAB file. Successfu...
Symantec Products CAB Files Memory Corruption Vulnerability
This host is installed with Symantec Product and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecprdtscabfilesmemcorrvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Symantec Products CAB Files Memory Corruption Vulnerability Authors: Rachana Shetty Copyright:...
Symantec Products CAB Files Memory Corruption Vulnerability
Symantec Product is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...