[Full-disclosure] ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability

ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-001.html January 12, 2006 -- CVE ID: CVE-2006-0162 -- Affected Vendor: Clam AntiVirus -- Affected Products: Clam AntiVirus 0.80 through 0.87.1 -- TippingPointTM IPS Customer...

Multiple Symantec Antivirus products buffer overflow

Heap memory buffer overflow on UPX compressed files and RAR archives...

Kingsoft the"overflow"problem(for fun)-vulnerability warning-the black bar safety net

author:cocoruder date:15/12/2005 sowhat vulnerability report Even when using Kingsoft at the time also encountered this problem, causing the system of suspended animation machine, the thought that it's a overflow problem, perhaps you can use use, write a large paragraph E below, the temptation to...

Macromedia Flash Player fails to properly validate the frame type identifier read from a "SWF" file

Overview A buffer overflow vulnerability in some versions of the Macromedia Flash Player may allow a remote attacker to execute code on a vulnerable system. Description The Macromedia Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed...

Microsoft Windows Graphics Rendering Engine WMF/EMF Format Code Execution Vulnerability

Description Microsoft Windows WMF/EMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF or EMF formatted file causing the affected engine to attempt to parse it. Exploitation of this issue can trigger an...

Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability

Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...

[EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability

MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability Release Date: October 11, 2005 Date Reported: September 15, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Internet Explorer 5 SP4 Internet Explorer 5.5 SP2 - Windows ME Internet Explorer 6 SP1 - All Windows...

security flaw

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

Linux kernel ia32 compatibility for 64 bit platforms race condtions

Race conditions with heap memory corruption in execve syscall...

CVE-2005-0989

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

CVE-2005-0989

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

security flaw

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

security flaw

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

CVE-2005-0989: Undefined Security Weakness

The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...

Mozilla SuiteFirefox - JavaScript Lambda Replace Heap Memory Disclosure

Mozilla SuiteFirefox - JavaScript Lambda Replace Heap Memory Disclosure source: https://www.securityfocus.com/bid/12988/info Mozilla Suite/Firefox are reported prone to a memory-disclosure vulnerability. This issue can allow a remote attacker to access arbitrary heap memory. Due to an error in th...

Mozilla Suite/Firefox - JavaScript Lambda Replace Heap Memory Disclosure

source: https://www.securityfocus.com/bid/12988/info Mozilla Suite/Firefox are reported prone to a memory-disclosure vulnerability. This issue can allow a remote attacker to access arbitrary heap memory. Due to an error in the way 'replace' handles lambda expressions, a remote attacker can access...

Smail 3 - Multiple RemoteLocal Vulnerabilities

Smail 3 - Multiple RemoteLocal Vulnerabilities // source: https://www.securityfocus.com/bid/12899/info Smail-3 is reported prone to multiple vulnerabilities. These issues can allow a local or remote attacker to execute arbitrary code on a vulnerable computer. A successful attack may lead to a...

CVE-2005-0055

CVE-2005-0055 concerns a remote code execution vulnerability in Internet Explorer 5.01, 5.5, and 6, caused by improper buffer validation when handling certain DHTML methods (notably createControlRange). Exploitation requires a user to view a malicious Web page or HTML email; the attacker gains th...

Microsoft Internet Explorer DHTML Method Buffer Overflow Vulnerability

Description Microsoft Internet Explorer is prone to a heap-based buffer-overflow vulnerability caused by a boundary condition error that is exposed when passing data to the 'createControlRange' DHTML method. As a result, heap-based memory can be corrupted with attacker-supplied data. An attacker...

Microsoft Internet Explorer contains a DHTML method heap memory corruption vulnerability

Overview Microsoft Internet Explorer contains a flaw in DHTML method handling which may allow a remote attacker to execute arbitrary code. Description The DHTML method handling in Internet Explorer fails to perform proper bounds checking. This vulnerability may allow data to be written outside th...