1644 matches found
Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net
Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...
Rookie magic bis in the PE file gap write code-vulnerability warning-the black bar safety net
It is also a series of second, the interval time is relatively long. 1. Don't know how many people remember or have seen rookie magic one,mentioned inside of SOFTICE and PE files phase Off of little knowledge,and the PE file structure,you continue to see this are helpful 2. If you're even a rooki...
SUSE-SA:2006:060: clamav
The remote host is missing the patch for the advisory SUSE-SA:2006:060 clamav. Two security problems have been found and fixed in the anti virus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute...
CVE-2007-0879
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Buffer overflow
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-0879: Undefined Security Weakness
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
WEB vulnerabilities mining techniques-vulnerability warning-the black bar safety net
Source: security focus Author: 7all sgh81at163.com WEB vulnerability Mining Technology |=---------------= WEB vulnerability Mining Technology=-----------------------------=| |=-----------------------------------------------------------------=| |=---------------= 7all7all7at163. com...
CVE-2007-0125
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...
CVE-2007-0125
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...
CVE-2007-0125: Undefined Security Weakness
Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...
Kaspersky反病毒扫描引擎PE文件拒绝服务漏洞
Kaspersky Antivirus是一款流行的客户端和网关病毒扫描。 Kaspersky Antivirus处理特殊构建的PE文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 PE文件中其中之一的头数据是可选Windows头数据段，这个PE头字段数据包含Windows链接器和装载器所需的信息，如果'NumberOfRvaAndSizes'字段中数据包含非法值，可导致应用程序崩溃。 Kaspersky Anti-Virus Personal Pro 5.0 Kaspersky Anti-Virus Personal 5.0 Kaspersky Anti-Virus fo...
Kaspersky Anti-Virus PE File Handling DoS
The version of Kaspersky Anti-Virus installed on the remote host is affected by a denial of service issue that can be triggered with a specially crafted PE portable executable file to send the scanning engine into an infinite loop and prevent scanning of other files. C Tenable Network Security,...
Kaspersky AntiVirus扫描引擎PE文件处理拒绝服务漏洞
Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky Antivirus在处理特制的PE文件时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致扫描引擎陷入死循环。 PE文件中的一个头部结构选项是Optional Windows Header部分，该部分包含有Windows链接器和加载器所需要的信息。NumberOfRvaAndSizes字段的无效值会导致Kaspersky在无限循环中反复地寻找并读取文件的同一部分，这样扫描引擎就会陷入死循环，无法再扫描文件。 Kaspersky Labs Kaspersky Antivirus 6.0 for Windows...
Kaspersky Antivirus DoS
Endless loop on invalid NumberOfRvaAndSizes field value of PE file...
[Full-disclosure] iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability
Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability iDefense Security Advisory 01.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 05, 2007 I. BACKGROUND Kaspersky Antivirus is a popular client and gateway virus scanner. For more information see their site:...
CVE-2006-6627
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allo...
CVE-2006-6627
Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allo...
CVE-2006-6627
CVE-2006-6627 affects BitDefender products prior to 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner, plus BitDefender products for Microsoft ISA Server and Exchange 5.5–2003. The issue is an integer overflow in the packed PE fi...
Mandrake Linux Security Advisory : clamav (MDKSA-2006:138)
Damian Put discovered a boundary error in the UPX extraction module in ClamAV which is used to unpack PE Windows executables. This could be abused to cause a Denial of Service issue and potentially allow for the execution of arbitrary code with the permissions of the user running clamscan or clam...