EUVD-2009-1738

Malware in sbrugna...

Code injection

InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service application crash via a crafted Hollywood FX Compressed Archive .hfz file...

CVE-2009-1744

InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service application crash via a crafted Hollywood FX Compressed Archive .hfz file...

CVE-2009-1743

Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a ..\ dot dot backslash sequence in a Hollywood FX Compressed...

Directory traversal

Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a ..\ dot dot backslash sequence in a Hollywood FX Compressed...

CVE-2009-1744: Improper Limitation of a Pathname to a Restricted Directory

InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to cause a denial of service application crash via a crafted Hollywood FX Compressed Archive .hfz file...

CVE-2009-1743

CVE-2009-1743 describes a directory traversal vulnerability in InstallHFZ.exe 6.5.201.0, part of Pinnacle Hollywood Effects 6 within Pinnacle Studio 12. An attacker can craft a Hollywood FX Compressed Archive (.hfz) filename containing a ..\ sequence to create or overwrite arbitrary files on the ...

CVE-2009-1743: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in InstallHFZ.exe 6.5.201.0 in Pinnacle Hollywood Effects 6, a module in Pinnacle Systems Pinnacle Studio 12, allows remote attackers to create and overwrite arbitrary files via a filename containing a ..\ dot dot backslash sequence in a Hollywood FX Compressed...