CVE-2008-0792: Undefined Security Weakness

Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and others, allow remote attackers to bypass malware detection via a crafted CAB archive...

Debian Security Advisory DSA 1263-1 (clamav)

The remote host is missing an update to clamav announced via advisory DSA 1263-1. Several remote vulnerabilities have been discovered in in the Clam anti-virus toolkit, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems:...

GLSA-200712-20 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200712-20 ClamAV: Multiple vulnerabilities iDefense reported an integer overflow vulnerability in the cliscanpe function when parsing Portable Executable PE files packed in the MEW format, that could be exploited to cause a...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

Code injection

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-6336

CVE-2007-6336 is a ClamAV vulnerability (pre-0.92) caused by an off-by-one error when decompressing MS-ZIP CAB files. Remote attackers could execute arbitrary code by supplying a crafted CAB file. The issue is addressed by upgrading to ClamAV 0.92 or newer (per connected advisories noting fixes f...

CVE-2007-6336: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

Heap overflow

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-0447: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-4787: Improper Input Validation

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed 1 CAB, 2 LZH, and 3 RAR files with modified headers, which might allow remote attackers to bypass malware detection...

Sophos Anti-Virus CAB, RAR and LZH Scanning Evasion

The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'CAB' 'RAR' and 'LZH' files which may allow an attacker to evade the anti- virus scanning by sending a specially-malformed archive. In addition, an attacker may exploit a...

Baidu net horse tools-vulnerability warning-the black bar safety net

Baidu net horse when you want to use the CAB file package is CABARC Usage: CABARC options command cabfile @list files destdir Commands: L List contents of cabinet e.g. cabarc l test. cab N Create new cabinet e.g. cabarc n test. cab . c app. mak . h X Extract files from cabinet e.g. cabarc x test...

Race condition

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

CVE-2007-3970

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...

PT-2007-5190 · Eset · Eset Nod32 Antivirus

Name of the Vulnerable Software and Affected Versions: ESET NOD32 Antivirus versions prior to 2.2289 Description: A race condition in the software allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption. This issue can be exploited to gain...

CVE-2007-3970: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption...