[SECURITY] Fedora 14 Update: cabextract-1.3-1.fc14

cabextract is a program which can extract files from cabinet .cab archives...

[SECURITY] Fedora 12 Update: cabextract-1.3-1.fc12

cabextract is a program which can extract files from cabinet .cab archives...

CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

DEBIAN-CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

DEBIAN-CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2800

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

CVE-2010-2801

CVE-2010-2801 (cabextract, related libmspack/Quantum decompressor) suffers an integer signedness error in the Quantum decompressor when testing archives, potentially enabling a remote attacker to cause a crash or execute arbitrary code via a crafted .cab file. Affected versions are cabextract pri...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2800: Undefined Security Weakness

The MS-ZIP decompressor in cabextract before 1.3 allows remote attackers to cause a denial of service infinite loop via a malformed MSZIP archive in a .cab file during a 1 test or 2 extract action, related to the libmspack library...

Microsoft WinVerifyTrust Cabview Corruption Security Bypass (MS10-019; CVE-2010-0487)

A cabinet is a single file, usually suffixed with .CAB, that stores compressed files in a file library. A vulnerability has been discovered in the Windows Authenticode Signature verification for cabinet .cab file formats. The vulnerability is caused when the Windows Cabinet File Viewer omits fiel...

SuSE9 Security Update : clamav (YOU Patch Number 12610)

Specially crafted CAB archives could crash clamav CVE-2010-1311 or bypass virus detection CVE-2010-0098. clamav has been updated to version 0.96 which fixes those issues. Citing freshmeat.net : This Release introduces new malware detection mechanisms and other significant improvements to the scan...

ClamAV memory corruption

Memory corruption on CAB files parsing...

Mandriva Update for clamav MDVSA-2010:082 (clamav)

Check for the Version of clamav OpenVAS Vulnerability Test Mandriva Update for clamav MDVSA-2010:082 clamav Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:082-1)

Multiple vulnerabilities has been found and corrected in clamav : ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities CVE-2010-0098. The...

CVE-2010-1425: Undefined Security Weakness

F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for...

Microsoft Windows file signature spoofing

Signature spoofing in PE and CAB files...

CVE-2010-0487

CVE-2010-0487 describes a remote code execution vulnerability in Windows Cabinet File Viewer (cabview.dll) where the Authenticode signature verification omits certain fields from the digest for cabinet files. Affected: Cabinet File Viewer Shell Extension (cabview.dll) versions 5.1, 6.0, 6.1 on Wi...

CVE-2010-0486

CVE-2010-0486 describes a remote code execution vulnerability in Windows Authenticode Signature Verification (WinVerifyTrust) affecting PE and cabinet (.CAB) handling. The flaw arises from improper use of certain file digest fields during signing/verifying, enabling a modified signed file to exec...

F-Secure Products Archive Files Scan Evasion (2010-1)

The remote host has an antivirus product from F-Secure installed. According to its version, the product fails to accurately scan specially crafted 7Z, GZIP, CAB, and RAR archive files. It is, therefore, possible for such files to evade detection from the scanning engine. C Tenable Network Securit...