ESTsoft ALYac Anti-Virus 1.5 <= 5.0.1.2 - Privilege Escalation Vulnerability

No description provided by source. ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called AYDrvNTALYAC , and handles the...

ESTsoft InternetDisk Arbitrary File Upload and Script Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18279/info ESTsoft InternetDisk is prone to an arbitrary file-upload and script-execution vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver...

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability

No description provided by source. ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability Vendor: ESTsoft Corp. Product web page: http://www.altools.com Affected version: 2.0.0.4 Summary: ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty ...

KLA10062 LPE vulnerability in ALFtp

An untrusted path vulnerability was found in ALFtp. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at point related to unknown vectors. Original advisories ALtools advisory Related products Altools-ALFTP CVE list...

ESTsoft ALZip MIM File Buffer Overflow (CVE-2011-1336)

A remote code execution vulnerability has been reported in ESTsoft's ALZip. The vulnerability is due to an error while parsing MIME files. A remote attacker may exploit this vulnerability by sending a specially crafted .mim file to an affected user. Successful exploitation of this vulnerability...

ESTsoft ALZip MIM File Handling Buffer Overflow

Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...

ESTsoft ALZip MIM File Handling Buffer Overflow

Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...

ESTsoft ALZip MIM File Handling Buffer Overflow

Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...

ESTsoft ALZip MIM File Handling Buffer Overflow

Added: 08/09/2011 CVE: CVE-2011-1336 BID: 48493 OSVDB: 73684 Background ESTsoft ALZip is a Windows-based file compression program that can unzip 40 different zip file archives. ALZip can zip files into 8 different archives such as ZIP, EGG, TAR and others. Problem ESTsoft ALZip 8.21 and earlier i...

KLA10059 ACE vulnerability in ALZip

A buffer overflow vulnerability was found in the ALZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited at a point related to unknown vectors via a specially designed MIM file. Original advisories ALTools bulletin...

ESTsoft ALPlayer 2.0 - ASX Playlist File Handling Buffer Overflow

ESTsoft ALPlayer 2.0 - ASX Playlist File Handling Buffer Overflow ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability Vendor: ESTsoft Corp. Product web page: http://www.altools.com Affected version: 2.0.0.4 Summary: ALPlayer former ALShow is an easy-to-use media player...

ESTsoft ALPlayer 2.0 - ASX Playlist File Handling Buffer Overflow

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability Vendor: ESTsoft Corp. Product web page: http://www.altools.com Affected version: 2.0.0.4 Summary: ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty of codecs, and it's prepared to...

ESTsoft ALPlayer 2.0 ASX Playlist File Handling Buffer Overflow Vulnerability

Summary ALPlayer former ALShow is an easy-to-use media player that comes equipped with plenty of codecs, and it's prepared to download more if needed. Description The vulnerability is caused due to a boundary error in the processing of a playlist file , which can be exploited to cause a stack-bas...

ESTsoft ALZip 8.12.0.3 - '.zip' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/45917/info ESTsoft ALZip is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks...

ESTsoft ALZip 8.12.0.3 - .zip Remote Buffer Overflow

ESTsoft ALZip 8.12.0.3 - .zip Remote Buffer Overflow source: https://www.securityfocus.com/bid/45917/info ESTsoft ALZip is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute arbitrary co...

ESTsoft ALYac Anti-Virus 1.5 5.0.1.2 - Local Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 5.0.1.2 - Local Privilege Escalation ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called...

ESTsoft ALYac Anti-Virus 1.5 < 5.0.1.2 - Local Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called "AYDrvNTALYAC" , and handles the device io control code = 0x223e2...

CVE-2008-2702

Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by...

CVE-2008-2702

Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345. NOTE: this can be leveraged for code execution by...

CVE-2008-2702

CVE-2008-2702 affects the FTP client in ESTsoft ALTools ALFTP (4.1 beta 2 and 5.0). The vulnerability is a directory traversal via .. in a LIST response, allowing a remote FTP server to create or overwrite arbitrary files on the affected system. The note explicitly mentions potential for code exe...