Lucene search
+L

543 matches found

securityvulns
securityvulns
added 2006/10/19 12:00 a.m.37 views

Multiple ClamAV antivirus security vulnerabilities

Buffer overflow on PE files parsing, DoS on CHM parsing...

3.9AI score
SaveExploits0References3Affected Software1
exploitpack
exploitpack
added 2006/10/17 12:00 a.m.13 views

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service PoC !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

7.3AI score
SaveExploits0
zdt
zdt
added 2006/10/17 12:00 a.m.18 views

Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC

Exploit for multiple platform in category dos / poc ====================================================== Clam AntiVirus = 0.88.4 CHM Chunk Name Length DoS PoC ====================================================== !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/10/16 11:07 p.m.18 views

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

5CVSS6.2AI score0.10739EPSS
SaveExploits1References19
UbuntuCve
UbuntuCve
added 2006/10/16 11:07 p.m.26 views

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

5CVSS6AI score0.10739EPSS
SaveExploits1References1
OSV
OSV
added 2006/10/16 11:07 p.m.7 views

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

6.1AI score
SaveExploits0References20
Debian CVE
Debian CVE
added 2006/10/16 11:00 p.m.46 views

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

5CVSS5.9AI score0.10739EPSS
SaveExploits1
Cvelist
Cvelist
added 2006/10/16 11:00 p.m.37 views

CVE-2006-5295

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service scanning service crash via a crafted Compressed HTML Help CHM file that causes ClamAV to "read an invalid memory location."...

6AI score0.10739EPSS
SaveExploits1References19
securityvulns
securityvulns
added 2006/10/16 12:00 a.m.30 views

[SA22370] Clam AntiVirus CHM Unpacker and PE Rebuilding Vulnerabilities

TITLE: Clam AntiVirus CHM Unpacker and PE Rebuilding Vulnerabilities SECUNIA ADVISORY ID: SA22370 VERIFY ADVISORY: http://secunia.com/advisories/22370/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/...

0.8AI score
SaveExploits0
FreeBSD
FreeBSD
added 2006/10/15 12:00 a.m.18 views

clamav -- CHM unpacker and PE rebuilding vulnerabilities

Secunia reports: Two vulnerabilities have been reported in Clam AntiVirus, which potentially can be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. 1 An unspecified error in the CHM unpacker in chmunpack.c can be exploited to cause a DoS. 2 An...

3.6AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2006/10/14 12:00 a.m.16 views

Debian DSA-1144-1 : chmlib - missing input sanitising

It was discovered that one of the utilities shipped with chmlib, a library for dealing with Microsoft CHM files, performs insufficient sanitising of filenames, which might lead to directory traversal. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

5CVSS5.4AI score0.02323EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2006/06/23 12:02 a.m.19 views

CVE-2006-3178

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

5CVSS6AI score0.02323EPSS
SaveExploits0References1
OSV
OSV
added 2006/06/23 12:02 a.m.9 views

CVE-2006-3178

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

6.5AI score
SaveExploits0References10
OSV
OSV
added 2006/06/23 12:02 a.m.6 views

DEBIAN-CVE-2006-3178

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

5CVSS7.1AI score0.02323EPSS
SaveExploits0References1
NVD
NVD
added 2006/06/23 12:02 a.m.18 views

CVE-2006-3178

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

5CVSS6.6AI score0.02323EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2006/06/23 12:00 a.m.38 views

CVE-2006-3178

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

5CVSS6.4AI score0.02323EPSS
SaveExploits0
CVE
CVE
added 2006/06/23 12:00 a.m.49 views

CVE-2006-3178

CVE-2006-3178 affects CHM Lib (chmlib) prior to version 0.38. A directory traversal vulnerability in the extract_chmLib example/program allows an attacker to overwrite arbitrary files by including files with a “..” in a CHM archive filename. Public references describe Debian (DSA-1144-1) updates ...

5CVSS6.6AI score0.02323EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2006/06/23 12:00 a.m.27 views

CVE-2006-3178

Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...

6.6AI score0.02323EPSS
SaveExploits0References9
NVD
NVD
added 2006/06/06 8:06 p.m.21 views

CVE-2006-2869

Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors...

10CVSS6.7AI score0.01707EPSS
SaveExploits0References5
Prion
Prion
added 2006/06/06 8:06 p.m.20 views

Code injection

Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors...

10CVSS7.3AI score0.01707EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder