216 matches found
CVE-2006-4335
The CVE-2006-4335 issue affects gzip 1.3.5, specifically the LZH decompression code (unlzh.c make_table), where an array index/out-of-bounds handling on certain platforms can cause a crash or arbitrary code execution via a crafted GZIP archive. Public advisories describe a stack modification/boun...
multiple vulnerabilities in lha
Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GZIP archive that triggers an...
CVE-2006-4335
Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GZIP archive that triggers an...
gzip contains a .bss buffer overflow in its LZH handling
Overview The gzip program contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description The gzip program is used to compress and decompress archived files. Some implementations of gzip include support for the LZH...
CVE-2006-4033
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize...
CVE-2006-4033
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize...
CVE-2006-4033: Undefined Security Weakness
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize...
[Full-disclosure] [vuln.sg] Lhaz LHA Long Filename Buffer Overflow Vulnerability
vuln.sg Vulnerability Research Advisory Lhaz LHA Long Filename Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-08-06 Summary ------- Some vulnerabilities have been found in Lhaz. When exploited, the vulnerabilities allow execution of arbitrary code when the user extracts a...
[vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability
vuln.sg Vulnerability Research Advisory Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-07-31 Summary ------- A vulnerability has been found in Lhaplus. When exploited, the vulnerability allows execution of arbitrary code when the user...
lhaplus buffer overflow
Buffer overflow on LZH archive header parsing...
CVE-2005-3569
INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service application crash via unknown attack vectors involving LZH files...
CVE-2005-3569
CVE-2005-3569 affects IBM DB2 Content Manager’s INSO service on AIX (versions up to 8.2 FP10). The vulnerability allows a denial of service (application crash) via unknown attack vectors involving LZH files. Impact is DoS with partial availability loss. Affected products include IBM DB2 Content M...
CVE-2005-3569
INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service application crash via unknown attack vectors involving LZH files...
CVE-2005-3569: Undefined Security Weakness
INSO service in IBM DB2 Content Manager before 8.2 Fix Pack 10 on AIX allows attackers to cause a denial of service application crash via unknown attack vectors involving LZH files...
[SA17388] IBM DB2 Content Manager Potential Denial of Service Vulnerabilities
TITLE: IBM DB2 Content Manager Potential Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA17388 VERIFY ADVISORY: http://secunia.com/advisories/17388/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: DB2 Content Manager 8.x http://secunia.com/product/6083/ DESCRIPTION: Some...