549 matches found
CVE-2007-1997
Integer signedness error in the 1 cabunstore and 2 cabextract functions in libclamav/cab.c in Clam AntiVirus ClamAV before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based...
CVE-2007-1745
The chmdecompressstream function in libclamav/chmunpack.c in Clam AntiVirus ClamAV before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third part...
CVE-2007-1745
CVE-2007-1745 affects ClamAV prior to 0.90.2, where the function chm_decompress_stream in libclamav/chmunpack.c leaks file descriptors when processing a crafted CHM file. The description from the initial document states the impact is unknown and does not specify a concrete exploit path or affecte...
SUSE-SA:2006:060: clamav
The remote host is missing the patch for the advisory SUSE-SA:2006:060 clamav. Two security problems have been found and fixed in the anti virus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute...
DEBIAN-CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
Memory corruption
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2007-0619
chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption...
CVE-2006-6676
Integer overflow in the a OLE2 and b CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted 1 .DOC or 2 .CAB file that triggers a heap-based buffer overflow...
CVE-2006-6676
CVE-2006-6676 affects ESET NOD32 Antivirus before version 1.1743, with a heap-based buffer overflow in the OLE2 and CHM parsers triggered by crafted .DOC or .CAB files. This integer overflow allows remote attackers to execute arbitrary code. The vulnerability is documented in CVE records and NVD/...
CVE-2006-6676
Integer overflow in the a OLE2 and b CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted 1 .DOC or 2 .CAB file that triggers a heap-based buffer overflow...
ESET NOD32 antivirus multiple security vulnerabilities
Buffer overflow on .DOC documents and .CAB archives parsing, DoS on CHM files parsing...
NOD32 Antivirus < 1.1743 Multiple File Processing Vulnerabilities
The version of NOD32 installed on the remote host reportedly has a heap overflows involving processing of '.doc' and '.cab' files and a divide-by-zero flaw involving '.chm' files. A remote attacker may be able to leverage the first flaw to execute code remotely or crash the affected service. C...
Sophos Anti-Virus multiple security vulnerabilities
Crash on parsing malformed RAR, CHM and petite-packed files. Buffer overflow on CPIO and SIT archives parsing...
Sophos Antivirus CHM File Heap Overflow PoC
No description provided by source. Sophos Antivirus CHM File Heap Overflow Vulnerability http://www.milw0rm.com/sploits/12092006-sophoschunkheap.chm...
Sophos AntiVirus - '.CHM' File Heap Overflow (PoC)
Sophos Antivirus CHM File Heap Overflow Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2910.chm 12092006-sophoschunkheap.chm milw0rm.com 2006-12-10...
Sophos AntiVirus - .CHM File Heap Overflow (PoC)
Sophos AntiVirus - .CHM File Heap Overflow PoC Sophos Antivirus CHM File Heap Overflow Vulnerability https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2910.chm 12092006-sophoschunkheap.chm milw0rm.com 2006-12-10...
Sophos Antivirus CHM Chunk Name Length Memory Corruption PoC
Exploit for multiple platform in category dos / poc ============================================================ Sophos Antivirus CHM Chunk Name Length Memory Corruption PoC ============================================================ http://www.inj3ct0r.com/sploits/6240.chm 0day.today 2018-04-03...