CVE-2007-4888: Undefined Security Weakness

The "You are not allowed..." error handler in XWiki 1.0 B1 and 1.0 B2 associates the doc variable with the entire document content and metadata regardless of a user's view rights, which allows remote authenticated users to read arbitrary documents via a custom skin that prints the content attribu...

Security fix for the ALT Linux 5 package netpbm version 10.35.30-alt1

Aug. 20, 2007 Alexey Tourbin 10.35.30-alt1 - 10.33 - 10.35.30 from netpbm.svn.sourceforge.net repo + fixes buffer overflow in pamtofits CVE-2006-3145 - sync RedHat patches Jindrich Novy, 10.35-14 + pamscale won't waste all system resources by usage of uninitialized variables for output image...

[SECURITY] Fedora Core 6 Update: tetex-3.0-35.fc6

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...

[SECURITY] Fedora 7 Update: tetex-3.0-40.1.fc7

TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...

Norman Virus Control DOC文件解析拒绝服务漏洞

BUGTRAQ ID: 25014 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control在处理畸形格式的.DOC文件时存在漏洞，远程攻击者可能利用此漏洞导致程序不可用。 Norman Virus Control的文件解析引擎没有正确地解析.DOC OLE2文件，在解析计算时可能错误地将0用作除数，导致无法处理的异常，应用程序可能会崩溃。 Norman Virus Control = 5.90 Norman ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.norman.com/...

CVE-2007-3952

The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a crafted DOC file, resulting from an "integer cast around"...

Design/Logic Flaw

The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted DOC file that triggers a divide-by-zero error...

Design/Logic Flaw

The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a crafted DOC file, resulting from an "integer cast around"...

CVE-2007-3953

CVE-2007-3953 affects Norman Antivirus prior to 5.91.02. The vulnerability lies in the OLE2 parsing component, where processing a crafted DOC file triggers a divide-by-zero error, enabling a remote attacker to cause a denial of service. The provided sources do not include exploit details or concr...

CVE-2007-3952

The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a crafted DOC file, resulting from an "integer cast around"...

CVE-2007-3953: Undefined Security Weakness

The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted DOC file that triggers a divide-by-zero error...

Norman Antivirus multiple security vulnerabilities

Protection bypass with .DOC files, division by zero on DOC parsing, multiple buffer overflows on LZH and ACE archives parsing...

FTP Server Zipped .doc File Detection

Binary data 4038.prm...

FTP Server Zipped .doc File Uploaded

Binary data 4054.prm...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

Code injection

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

DEBIAN-CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...

CVE-2007-2650

The OLE2 parser in Clam AntiVirus ClamAV allows remote attackers to cause a denial of service resource consumption via an OLE2 file with 1 a large property size or 2 a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file...