661 matches found
DSA-1263-1 clamav
Bulletin has no description...
GLSA-200703-03 : ClamAV: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200703-03 ClamAV: Denial of Service An anonymous researcher discovered a file descriptor leak error in the processing of CAB archives and a lack of validation of the 'id' parameter string used to create local files when parsing MI...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
CVE-2007-0897
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
CVE-2007-0897: Missing Release of Resource after Effective Lifetime
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service file descriptor consumption and failed scans via CAB archives with a cabinet header record length of zero, which causes a function to return...
ClamAV antivirus directory traversal
MIME part id is used to form local filename without checking for ../. In addition, there is a DoS on CAB files parsing...
CVE-2006-6960
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...
CVE-2006-6960
The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...
CVE-2006-6960: Undefined Security Weakness
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...
NOD32 Anti-Virus CAB文件解析引擎整数溢出漏洞
NOD32 Anti-Virus是一款流行的反病毒软件。 NOD32 Anti-Virus处理CAB文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 特殊构建的.CAB文件，当NOD32 Anti-Virus解析时可导致整数溢出而以应用程序进程权限执行任意指令。 Eset Software NOD32 Antivirus 可参考如下安全公告获得补丁信息： http://eset.com/support/updates.php?pageno=63...
[Full-disclosure] NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory
n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.005 21-Dec-2006 Vendor: ESET, http://eset.com Affected Products: ESET NOD32 Antivirus Vulnerability: Arbitrary Code Execution remote Risk: HIGH Vendor communication: 2006/08/24 initial notification of ESET 2006/08/28 ESET Respon...
ESET NOD32 antivirus multiple security vulnerabilities
Buffer overflow on .DOC documents and .CAB archives parsing, DoS on CHM files parsing...
NOD32 Antivirus < 1.1743 Multiple File Processing Vulnerabilities
The version of NOD32 installed on the remote host reportedly has a heap overflows involving processing of '.doc' and '.cab' files and a divide-by-zero flaw involving '.chm' files. A remote attacker may be able to leverage the first flaw to execute code remotely or crash the affected service. C...
CVE-2006-5938
Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB file...
CVE-2006-5937
Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted 1 CAB or 2 RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information...
CVE-2006-5937
CVE-2006-5937 relates to multiple integer overflows in Grisoft AVG Anti-Virus prior to 7.1.407. The vulnerability allows remote attackers to execute arbitrary code by supplying crafted CAB or RAR archives that trigger a heap-based buffer overflow. Publicly included references note this involves r...
CVE-2006-5938: Improper Input Validation
Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB file...
CVE-2006-5937: Integer Overflow or Wraparound
Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted 1 CAB or 2 RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information...
AVG Anti-Virus多个远程代码执行漏洞
AVG Anti-Virus是一款功能完备的杀毒软件。 AVG Anti-Virus的文件解析引擎存在多个漏洞，目前已确定的漏洞包括： - 解析.CAB文件时的整数溢出可能导致堆溢出； - 解析.CAB文件时未初始化变量； - 解析.DOC文件时会分隔为0； - 解析.RAR文件时的整数溢出可能导致堆溢出； - 解析.EXE文件时存在整数问题。 如果攻击者创建了特制文件的话，这些漏洞就可能导致远程执行任意代码。 Grisoft AVG Anti-Virus 7.1.407 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...