Lucene search
+L

216 matches found

NVD
NVD
•added 2010/06/25 6:30 p.m.•24 views

CVE-2010-2434

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

9.3CVSS7.9AI score0.05359EPSS
SaveExploits0References7
Prion
Prion
•added 2010/06/25 6:30 p.m.•21 views

Buffer overflow

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

9.3CVSS8.5AI score0.05359EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2010/06/25 6:00 p.m.•59 views

CVE-2010-2434

The CVE-2010-2434 issue affects Explzh (pon Software) with Arcext.dll 2.16.1 and earlier. A crafted LHA/LZH header triggers a buffer overflow while Expanding the archive, allowing remote code execution. Affected component: Explzh’s LHA handling via Arcext.dll; root cause: unsafe handling of craft...

9.3CVSS8.1AI score0.05359EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2010/06/25 6:00 p.m.•31 views

CVE-2010-2434

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

7.9AI score0.05359EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/25 12:00 a.m.•7 views

CVE-2010-2434: Buffer Copy without Checking Size of Input

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion...

9.3CVSS6.5AI score0.05359EPSS
SaveExploits0References2
seebug.org
seebug.org
•added 2010/05/11 12:00 a.m.•23 views

ESET Smart Security / NOD32 Antivirus LZH Processing Denial of Service

No description provided by source. Oleksiuk Dmitry has discovered a vulnerability in ESET Smart Security and ESET NOD32 Antivirus, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error when processing LZH archives. This can be...

7.1AI score
SaveExploits0
securityvulns
securityvulns
•added 2010/05/07 12:00 a.m.•48 views

ESET Smart Security / Nod32 memory corruption

Memory corruption on LZH archives scanning...

2AI score
SaveExploits0References1Affected Software2
securityvulns
securityvulns
•added 2010/05/07 12:00 a.m.•36 views

ESET Smart Security LZH archive parsing vulnerability

Software: ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 Vendor status: notified/ignored Tested on: Windows XP, Vista, 7 x32 and x64 Description: Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. PoC...

1.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/05/07 12:00 a.m.•27 views

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86x64) - LZH archive parsing (PoC)

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 x86x64 - LZH archive parsing PoC ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log f...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/05/07 12:00 a.m.•49 views

ESET Smart Security 4.2 and NOD32 AntiVirus 4.2 (x86/x64) - LZH archive parsing (PoC)

ESET Smart Security 4.2 and NOD32 Antivirus 4.2 x32-x64 LZH archive parsing PoC exploit. Scanning of malicious file causes heap corruption in context of the service process ekrn.exe. See Dr. Watson log drwtsn32.log for details. USAGE: python esetlzh.py TEST.LZH will be created c 2010 eSage Lab...

5.8AI score
SaveExploits0
zdt
zdt
•added 2010/05/07 12:00 a.m.•44 views

ESET Smart Security 4.2 / NOD32 Antivirus 4.2 (x32-x64) LZH parsing PoC

Exploit for windows platform in category dos / poc ======================================================================= ESET Smart Security 4.2 / NOD32 Antivirus 4.2 x32-x64 LZH parsing PoC ======================================================================= ESET Smart Security 4.2 and NOD3...

7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/07/07 12:00 a.m.•26 views

ClamAV < 0.94 LZH File Unpacking DoS Vulnerability - Windows

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...

5CVSS5.8AI score0.02211EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2009/07/07 12:00 a.m.•27 views

ClamAV < 0.94 LZH File Unpacking DoS Vulnerability - Linux

ClamAV is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav";...

5CVSS6.3AI score0.02211EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2009/07/02 10:30 a.m.•25 views

CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...

5CVSS5.9AI score0.02211EPSS
SaveExploits0References2
Prion
Prion
•added 2009/07/02 10:30 a.m.•17 views

Design/Logic Flaw

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...

5CVSS6.7AI score0.02211EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2009/07/02 10:30 a.m.•26 views

CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...

5CVSS6.4AI score0.02211EPSS
SaveExploits0References4
OSV
OSV
•added 2009/07/02 10:30 a.m.•16 views

CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...

6.3AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2009/07/02 10:00 a.m.•37 views

CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...

6.3AI score0.02211EPSS
SaveExploits0References4
CVE
CVE
•added 2009/07/02 10:00 a.m.•78 views

CVE-2008-6845

CVE-2008-6845 affects ClamAV 0.93.3 and earlier. The DoS arises when unpacking LZH archives: a corrupted LZH file can cause a segmentation fault, leading to remote denial of service. Affects multiple platforms (Linux/Windows as per OpenVAS entries). The vulnerability is exploitable remotely; vend...

5CVSS6.4AI score0.02211EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2009/07/02 10:00 a.m.•44 views

CVE-2008-6845

The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...

5CVSS6.1AI score0.02211EPSS
SaveExploits0
Rows per page
Query Builder