1933 matches found
CVE-2002-1796
The CVE-2002-1796 issue affects ChaiVM EZloader for HP Color LaserJet 4500/4550 and HP LaserJet 4100/8150, where JAR signatures are not properly verified for new services. This allows local users to load unauthorized Chai services via the EZloader component. The vulnerability is documented across...
CVE-2002-1796
ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services...
CVE-2005-1080
Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...
CVE-2005-1080
Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...
CVE-2005-1080
The CVE-2005-1080 entry concerns a directory traversal vulnerability in the jar utility of the Java Archive Tool (Jar) used by J2SE SDK 1.4.2/1.5 and OpenJDK. The underlying issue allows a remote attacker to create or overwrite arbitrary files via a .. sequence in filenames stored inside a .jar f...
jdk -- jar directory traversal vulnerability
Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to compromise a user's system. The jar tool does not check properly if the files to be extracted have the string "../" on its names, so it's possible for an attacker to create a malicio...
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
CVE-2002-1308
CVE-2002-1308 describes a heap-based buffer overflow in Netscape and Mozilla that can be triggered by a jar: URL referencing a malformed .jar file, causing arbitrary code execution during decompression. The vulnerability affects Mozilla/Netscape components as described in the CVE record and corro...
Mozilla JAR File Decompression Heap Overflow (deprecated)
Binary data 1322.prm...
CVE-2003-1229
X509TrustManager in 1 Java Secure Socket Extension JSSE in SDK and JRE 1.4.0 through 1.4.001, 2 JSSE before 1.0.3, 3 Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and 4 Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in...
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.
The following is the text of an advisory with a couple of typos fixed that was sent to Netscape in early July. -rw-r--r-- 1 root root 3210 Jul 8 17:07 jar-writeup This was one a several vulnerabilities reported in Netscape/Mozilla over that period. Others included the previously posted zero-width...