Lucene search
K

3659 matches found

Tenable Nessus
Tenable Nessus
added 2010/02/24 12:0 a.m.93 views

Debian DSA-1974-1 : gzip - several vulnerabilities

Several vulnerabilities have been found in gzip, the GNU compression utilities. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2624 Thiemo Nagel discovered a missing input sanitation flaw in the way gzip used to decompress data blocks for dynamic...

6.8CVSS8.1AI score0.04774EPSS
Exploits1References7
Fedora
Fedora
added 2010/02/01 1:4 a.m.34 views

[SECURITY] Fedora 11 Update: gzip-1.3.12-10.fc11

The gzip package contains the popular GNU gzip data compression program. Gzipped files have a .gz extension. Gzip should be installed on your system, because it is a very commonly used data compression program...

6.8CVSS1.7AI score0.04774EPSS
Exploits0
Fedora
Fedora
added 2010/02/01 1:3 a.m.48 views

[SECURITY] Fedora 12 Update: gzip-1.3.12-14.fc12

The gzip package contains the popular GNU gzip data compression program. Gzipped files have a .gz extension. Gzip should be installed on your system, because it is a very commonly used data compression program...

6.8CVSS1.7AI score0.04774EPSS
Exploits0
OpenVAS
OpenVAS
added 2010/02/01 12:0 a.m.25 views

Debian Security Advisory DSA 1974-1 (gzip)

The remote host is missing an update to gzip announced via advisory DSA 1974-1. OpenVAS Vulnerability Test $Id: deb19741.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1974-1 gzip Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

6.8CVSS0.5AI score0.04774EPSS
Exploits1
OpenVAS
OpenVAS
added 2010/02/01 12:0 a.m.39 views

Debian: Security Advisory (DSA-1974-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS9AI score0.04774EPSS
Exploits1References3
Prion
Prion
added 2010/01/29 6:30 p.m.18 views

Integer overflow

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

6.8CVSS8.3AI score0.04774EPSS
Exploits0References31Affected Software1
NVD
NVD
added 2010/01/29 6:30 p.m.16 views

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

6.8CVSS8AI score0.04774EPSS
Exploits0References31
Cvelist
Cvelist
added 2010/01/29 6:0 p.m.25 views

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

9AI score0.04774EPSS
Exploits0References31
Debian CVE
Debian CVE
added 2010/01/29 6:0 p.m.44 views

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

6.8CVSS8.7AI score0.04774EPSS
Exploits0
myhack58
myhack58
added 2010/01/29 12:0 a.m.16 views

rar. exe at the mention of the right in the magical-vulnerability warning-the black bar safety net

3est rar. exe is? It is the famous winrar comes with a command line unzip program. At the mention of the right in the US is often todownloada variety of sensitive files, such as:SU directory. You think about it, if the su catalog file so much, do you want onedownload is?? This obviously is very...

6.7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2010/01/21 12:0 a.m.31 views

CentOS 3 / 4 / 5 : gzip (CESA-2010:0061)

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

6.8CVSS7.9AI score0.04774EPSS
Exploits0References7
Cent OS
Cent OS
added 2010/01/20 5:49 p.m.57 views

gzip security update

CentOS Errata and Security Advisory CESA-2010:0061 An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GN...

6.8CVSS7.1AI score0.04774EPSS
Exploits0References9
RedHat Linux
RedHat Linux
added 2010/01/20 2:59 p.m.32 views

Moderate: Red Hat Security Advisory: gzip security update

An updated gzip package that fixes one security issue is now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The gzip package provides the GNU gzip data compression program. An integer underfl...

6.8CVSS7.1AI score0.04774EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2010/01/20 12:0 a.m.35 views

CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading t...

6.8CVSS7.3AI score0.04774EPSS
Exploits0References2
OSV
OSV
added 2010/01/20 12:0 a.m.34 views

DSA-1974-1 gzip - arbitrary code execution

Bulletin has no description...

6.8CVSS8.8AI score0.04774EPSS
Exploits1
Zero Day Initiative
Zero Day Initiative
added 2009/12/08 12:0 a.m.32 views

Microsoft Windows Intel Indeo Codec Parsing Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Windows Media Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Inte...

9.3CVSS4.8AI score0.24111EPSS
Exploits0References1
Check Point Advisories
Check Point Advisories
added 2009/12/07 12:0 a.m.3 views

Internet Explorer Malformed GIF File Double Free (MS04-025; CVE-2003-1048)

The Graphics Interchange Format GIF defines a file format intended for the on-line transmission and interchange of raster graphic data. It uses the LZW compression algorithm to minimize file sizes. A double free vulnerability exists in the way Microsoft Internet Explorer handles images of the GIF...

10CVSS7.1AI score0.26628EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2009/11/11 10:2 p.m.4 views

httpd: possible temporary DoS (CPU consumption) in mod_deflate

The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...

7.1CVSS7.2AI score0.17111EPSS
Exploits3References4
VulnCheck KEV
VulnCheck KEV
added 2009/11/10 12:0 a.m.1 views

VulnCheck KEV: CVE-2009-0555

Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager ACM, does not properly process Advanced Systems Format ASF files, which allows remote attackers to execute arbitrary code via a crafted audio file that uses...

9.3CVSS6.2AI score0.27086EPSS
Exploits1References1
myhack58
myhack58
added 2009/11/10 12:0 a.m.8 views

Multi-layer unzip the ZIP package to evade anti-virus-vulnerability warning-the black bar safety net

BK group of large cattle are in the discussion of the mollusc, suddenly thought of in the cloud Shu BLOG once saw a infinite unzip the bag to let the soft kill loop of the article, the article mentioned some of the stupid anti-virus may occur an infinite loop, so smart why not die? Because some...

7AI score
Exploits0
Rows per page
Query Builder