2132 matches found
CVE-2005-1080
Directory traversal vulnerability in the Java Archive Tool Jar utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. dot dot in filenames in a .jar file...
CVE-2005-1080
The CVE-2005-1080 entry concerns a directory traversal vulnerability in the jar utility of the Java Archive Tool (Jar) used by J2SE SDK 1.4.2/1.5 and OpenJDK. The underlying issue allows a remote attacker to create or overwrite arbitrary files via a .. sequence in filenames stored inside a .jar f...
jdk -- jar directory traversal vulnerability
Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to compromise a user's system. The jar tool does not check properly if the files to be extracted have the string "../" on its names, so it's possible for an attacker to create a malicio...
CVE-2002-1308
CVE-2002-1308 describes a heap-based buffer overflow in Netscape and Mozilla that can be triggered by a jar: URL referencing a malformed .jar file, causing arbitrary code execution during decompression. The vulnerability affects Mozilla/Netscape components as described in the CVE record and corro...
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
CVE-2002-1308: Undefined Security Weakness
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
Mozilla JAR File Decompression Heap Overflow (deprecated)
Binary data 1322.prm...
CVE-2003-1229
X509TrustManager in 1 Java Secure Socket Extension JSSE in SDK and JRE 1.4.0 through 1.4.001, 2 JSSE before 1.0.3, 3 Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and 4 Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in...
CVE-2002-1308
Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression...
Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.
The following is the text of an advisory with a couple of typos fixed that was sent to Netscape in early July. -rw-r--r-- 1 root root 3210 Jul 8 17:07 jar-writeup This was one a several vulnerabilities reported in Netscape/Mozilla over that period. Others included the previously posted zero-width...