CVE-2014-2319

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

PowerArchiver buffer overflow vulnerability

Overview PowerArchiver from ConeXware, Inc. contains a buffer overflow vulnerability. PowerArchiver, file compression/decompression software from ConeXware, Inc. supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user opens a specially crafted file, an...

CVE-2007-5279

Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary code via a long filename in a BlackHole archive...

Heap overflow

Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary code via a long filename in a BlackHole archive...

CVE-2007-5279

PowerArchiver (ConeXware) has a heap-based/buffer overflow vulnerability disclosed as CVE-2007-5279 affecting versions up to 10.20.21. The flaw allows remote code execution when a user opens a specially crafted BlackHole archive with a long filename, resulting in arbitrary code execution with the...

CVE-2007-5279

Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary code via a long filename in a BlackHole archive...

KLA10298 ACE vulnerability in PowerArchiver

A buffer overflow was found in PowerArchiver. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed filename. Original advisories Version gistory Related products PowerArchiver-2010 CVE list CVE-2007-5279...

JVN#61323184 PowerArchiver buffer overflow vulnerability

PowerArchiver, file compression/decompression software from ConeXware, Inc. supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user opens a specially crafted file, an attacker could execute arbitrary code with the privileges of the user. Impact An attacke...

PowerArchiver PAISO.DLL ISO文件处理栈溢出漏洞

BUGTRAQ ID: 21867 PowerArchiver是一款压缩程序，除了一般压缩与解压缩的功能外，它并可设立密码及分片压缩功能，且支持鼠标右键的快显功能。 PowerArchiver在创建ISO镜像中文件的完整路径名时存在栈溢出漏洞，攻击者可能利用此漏洞控制用户机器。...

PowerArchiver PAISO.DLL ISO文件处理缓冲区溢出漏洞

PowerArchiver是一款解压缩程序。 PowerArchiver处理ISO映象文件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于PAISO.DLL version 1.7.3.0中的LoadTree和ReadHeader函数中，LoadTree和ReadHeader函数通过读取ISO文件中的目录条目构建每个文件的完整路径名，从每个目录条目中读取的目录名使用lstrcatA进行合成，最后成为文件名，最后使用不安全lstrcpyA函数拷贝到固定长度的堆栈缓冲区溢出，精心构建ISO文件，诱使用户打开，可导致以应用程序进程权限执行任意指令。...

Stack overflow

Multiple stack-based buffer overflows in the 1 LoadTree and 2 ReadHeader functions in PAISO.DLL 1.7.3.0 1.7.3 beta in ConeXware PowerArchiver 2006 9.64.02 allow user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories...

CVE-2007-0097

Multiple stack-based buffer overflows in the 1 LoadTree and 2 ReadHeader functions in PAISO.DLL 1.7.3.0 1.7.3 beta in ConeXware PowerArchiver 2006 9.64.02 allow user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories...

CVE-2007-0097

Multiple stack-based buffer overflows in the 1 LoadTree and 2 ReadHeader functions in PAISO.DLL 1.7.3.0 1.7.3 beta in ConeXware PowerArchiver 2006 9.64.02 allow user-assisted attackers to execute arbitrary code via a crafted ISO file containing a file within several nested directories...

CVE-2007-0097

CVE-2007-0097 affects PowerArchiver (ConeXware) PAISO.DLL 1.7.3.0 (1.7.3 beta) within PowerArchiver 2006 9.64.02. The vulnerability consists of multiple stack-based buffer overflows in the LoadTree and ReadHeader functions when handling ISO images, specifically when processing the full pathname o...

PowerArchiver paiso.dll ISO Image Handling Buffer Overflow

The remote host contains PowerArchiver, a file compression utility for Windows. The version of PowerArchiver installed on the remote host has a buffer overflow in the 'paiso.dll' library file that can be triggered when processing the full pathname of a file within an ISO image. If an attacker can...

[vuln.sg] PowerArchiver PAISO.DLL Buffer Overflow Vulnerability

vuln.sg Vulnerability Research Advisory PowerArchiver PAISO.DLL Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2007-01-04 Summary ------- A vulnerability has been found in PowerArchiver. When exploited, the vulnerability allows execution of arbitrary code when the user opens a...

CVE-2006-3985

Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name...

CVE-2006-3985

Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name...

CVE-2006-3985

CVE-2006-3985 affects ConeXware PowerArchiver 9.62.03 via DZIPS32.DLL 6.0.0.4, where a stack-based buffer overflow occurs when a crafted ZIP archive containing a long-named file is processed. This allows a user‑assisted attacker to execute arbitrary code. The connected records confirm the vulnera...

[Full-disclosure] [vuln.sg] PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability

vuln.sg Vulnerability Research Advisory PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-07-25 Summary ------- A vulnerability has been found in PowerArchiver. When exploited, the vulnerability allows execution of arbitrary code when the user adds a fil...