GLSA-200604-06 : ClamAV: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200604-06 ClamAV: Multiple vulnerabilities ClamAV contains format string vulnerabilities in the logging code CVE-2006-1615. Furthermore Damian Put discovered an integer overflow in ClamAV's PE header parser CVE-2006-1614 and David...

Mandrake Linux Security Advisory : clamav (MDKSA-2006:067)

Damian Put discovered an integer overflow in the PE header parser in ClamAV that could be exploited if the ArchiveMaxFileSize option was disabled CVE-2006-1614. Format strings in the logging code could possibly lead to the execution of arbitrary code CVE-2006-1615. David Luyer found that ClamAV...

Integer overflow

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

DEBIAN-CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2006-1614

ClamAV is affected by CVE-2006-1614 (integer overflow in the PE header parser libclamav/pe.c when ArchiveMaxFileSize is disabled), potentially enabling DoS or arbitrary code execution. Related issues CVE-2006-1615 (format string vulnerabilities in logging) and CVE-2006-1630 (invalid memory access...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2006-1614

Integer overflow in the cliscanpe function in the PE header parser libclamav/pe.c in Clam AntiVirus ClamAV before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

Norton Antivirus DoS

Antivirus crash on scanning malformed PE files...

EV0075.txt

New eVuln Advisory: Teca Diary PE SQL Injection Vulnerability http://evuln.com/vulns/75/summary.html --------------------Summary---------------- eVuln ID: EV0075 CVE: CVE-2006-0729 Software: Teca Diary PE Sowtware's Web Site: http://www.teca-scripts.com Versions: 1.0 Critical Level: Moderate Type...

[eVuln] Teca Diary PE SQL Injection Vulnerability

New eVuln Advisory: Teca Diary PE SQL Injection Vulnerability http://evuln.com/vulns/75/summary.html --------------------Summary---------------- eVuln ID: EV0075 CVE: CVE-2006-0729 Software: Teca Diary PE Sowtware's Web Site: http://www.teca-scripts.com Versions: 1.0 Critical Level: Moderate Type...

Sql injection

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...

CVE-2006-0729

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...

CVE-2006-0729

SQL injection vulnerability CVE-2006-0729 affects Teca Diary PE 1.0 in script functions.php, where un-sanitized parameters yy, mm, and dd allow remote attackers to inject arbitrary SQL. The issue is remote and results in possible arbitrary queries; exploit details are provided in eVuln/PacketStor...

CVE-2006-0729: Undefined Security Weakness

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...

Dynamic-SQL version of the new hole directly to get the background-bug warning-the black bar safety net

Source of Information: Network First register a number, enter the control panel to give yourself a clockwork SMS http://127.0.0.1/User/UserMessage.asp?Action=Del&ManageType=Inbox&MessageID=4 This is the point The user name is admin and the strangecatchwell caughtdisplay the record does not existi...

KillProcess administration utility buffer overflow

Buffer overflow on oversized process PE FileDescription field...

ProcessExplorer system monitoring tool buffer overflow

Buffer overflow during parsing of CompanyName and VersionInfo PE file headers of running process...

CVE-2004-2270

Technical details for CVE-2004-2270 are not publicly available in the provided documents. Monitor for updates. No specific affected products, vectors, or fixes are disclosed here.

CVE-2004-2270: Undefined Security Weakness

Unknown vulnerability in IBM Parallel Environment PE 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code...