216 matches found
CVE-2008-6845: Undefined Security Weakness
The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service segmentation fault via a corrupted LZH file...
[IVIZ-08-011] ClamAV lzh unpacking segmentation fault
----------------------------------------------------------------------- iViZ Security Advisory 08-011 10/12/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...
Multiple security vulnerabilities in different antiviral applications
ClamAV: LZH DoS; BitDefender: multiple integer overflow on PE parsing; Avast: multiple buffer overflows on ISO and RPM parsing; AVG: crash on UPX files; Sophos: multiple DoS on different compressed formats parsing; F-Secure F-prot: protection bypass...
CVE-2007-6175
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
Buffer overflow
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
CVE-2007-6175
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
CVE-2007-6175
CVE-2007-6175 affects Lhaplus 1.55 and earlier. A buffer overflow in LZH archive handling could allow remote attackers to execute arbitrary code when decompressing a crafted LZH file. Connected documents corroborate a vulnerable Lhaplus prior to 1.55 and note this is a separate issue from CVE-200...
CVE-2007-6175: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector than CVE-2007-5048...
CVE-2007-4787: Improper Input Validation
The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed 1 CAB, 2 LZH, and 3 RAR files with modified headers, which might allow remote attackers to bypass malware detection...
Sophos Anti-Virus CAB, RAR and LZH Scanning Evasion
The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'CAB' 'RAR' and 'LZH' files which may allow an attacker to evade the anti- virus scanning by sending a specially-malformed archive. In addition, an attacker may exploit a...
Norman Virus Control LZH及.ACE文件解析缓冲区溢出漏洞
BUGTRAQ ID: 25003,25015 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control的文件解析引擎没有正确的解析.LZH和.ACE文件，如果用户受骗打开了畸形的.LZH或.ACE文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意指令。 Norman Virus Control = 5.90 Norman ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.norman.com/...
Buffer overflow
Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...
CVE-2007-3951
Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...
CVE-2007-3951
Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...
Norman Antivirus multiple security vulnerabilities
Protection bypass with .DOC files, division by zero on DOC parsing, multiple buffer overflows on LZH and ACE archives parsing...
Lhaca LZH文档畸形Extended Header Size值栈缓冲区溢出漏洞
Lhaca是一款由日本开发的免费文档压缩解压工具。 Lhaca在处理畸形的LHA文档时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户机器。 Lhaca没有充分地验证从LHA文件读取的Extended Header Size值便将其拷贝到了Extended Header Data字节数的栈缓冲区，如果Extended Header Size值大于255的话就可能触发缓冲区溢出，导致执行任意指令；此外由于没有正确地使用strncpy还可能导致进一步覆盖该缓冲区。有漏洞的函数如下： function40D974FILE fp, char outbuffer cha...
Stack overflow
Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large LHA "Extended Header Size" value in an LZH archive, a different issue than CVE-2007-3375...
CVE-2007-3512
Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large LHA "Extended Header Size" value in an LZH archive, a different issue than CVE-2007-3375...
CVE-2007-3512: Undefined Security Weakness
Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large LHA "Extended Header Size" value in an LZH archive, a different issue than CVE-2007-3375...