107 matches found
Buffer overflow
Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafted UDF filesystem in an ISO image...
CVE-2011-3868
CVE-2011-3868 affects VMware products: Workstation 7.x before 7.1.5, Player 3.x before 3.1.5, Fusion 3.1.x before 3.1.3, and VMware AMS. A crafted UDF filesystem in an ISO image can lead to remote code execution. Mitigation per the initial description is to update to the listed fixed versions (7....
REMnux: A Linux Distribution for Reverse-Engineering Malware
REMnux: A Linux Distribution for Reverse-Engineering Malware REMnux is a lightweight Linux distribution for assisting malware analysts in reverse-engineering malicious software. The distribution is based on Ubuntu and is maintained by Lenny Zeltser. REMnux is designed for running services that ar...
KLA10385 ACE vulnerability in VMware
A buffer overflow was found in VMware products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ISO image. Original advisories VMware bulletin Exploitation Public exploits exist for this...
vdsm: missing VM post-zeroing after removal
Previously, the ISO image domain could not be shared with multiple Data Centers. The user had to define an independent ISO domain for each Data Center. With this update, the ISO image domain can be shared between multiple Data Centers...
Moderate: Red Hat Security Advisory: vdsm security, bug fix, and enhancement update
Updated vdsm packages that fix one security issue, various bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
CentOS 5 : kvm (CESA-2010:0088)
Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...
Important: Red Hat Security Advisory: kvm security and bug fix update
Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...
MDKA-2007:050 : shared-mime-info
A misconfiguration in the default application priorities was causing file-roller an archive manager to be used by default for ISO image files, instead of nautilus-cd-burner, for the GNOME desktop environment. This bug has been fixed with an updated shared-mime-info package, which also contains...
GLSA-200801-08 : libcdio: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200801-08 libcdio: User-assisted execution of arbitrary code Devon Miller reported a boundary error in the 'printiso9660recurse' function in files cd-info.c and iso-info.c when processing long filenames within Joliet images. Impac...
PowerArchiver paiso.dll ISO Image Handling Buffer Overflow
The remote host contains PowerArchiver, a file compression utility for Windows. The version of PowerArchiver installed on the remote host has a buffer overflow in the 'paiso.dll' library file that can be triggered when processing the full pathname of a file within an ISO image. If an attacker can...
Directory traversal
Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
Directory traversal
Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
CVE-2006-2099
Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
CVE-2006-2100
Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
CVE-2006-2101
Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
CVE-2006-2102
Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
Directory traversal
Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
