CVE-2007-3726

The CVE-2007-3726 issue is a signedness error in SET_VALUE (rarvm.cpp) in unrar 3.70 beta 3, used in WinRAR and RAR for OS X. A crafted RAR archive can cast a negative signed value to a large unsigned value, causing a denial of service (crash). No patch/version details are provided in the connect...

CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

CVE-2007-3725

CVE-2007-3725 affects ClamAV and its RAR VM (unrarvm.c): running vulnerable builds prior to 0.91 can crash the scanner (denial of service) via a crafted RAR archive, caused by a NULL pointer dereference. Public references in the OpenVAS and vendor advisories indicate platforms such as SUSE (clama...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability

This vulnerability allows attackers to create a denial of service condition on software with vulnerable installations of the Symantec's AntiVirus engine. Authentication is not required to exploit this vulnerability. The specific flaw resides in a forged PACKSIZE field of a RAR file header. By...

[Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vendor - ------ Clam Antivirus http://www.clamav.net Product - ------- Clamav libclamav Versions Affected - ----------------- All before 0.91 Severity - -------- Moderate Issue - ----- Clamav crashes due to processing of standard filters in RAR VM,...

ClamAV < 0.91.0 Multiple RAR Content Parsing Vulnerabilities (deprecated)

Binary data 4130.prm...

Re: [Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability.

Hi, The vulnerability also affects unrar 3.70 beta 3 freeware by Alexander Roshal, as it tries to read a negative location from a pointer reference in the SETVALUEfalse,Data,Addr-Offset function found in rarvm.cpp. The values of Addr is 1666528 while Offset is 4546004 which of course results in...

KLA10350 Vulnerabilities in Symantec

Unspecified vulnerabilities were found in Symantec AntiVirus. By exploiting these vulnerabilities malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via specially designed CAB or RAR archives. Original advisories Symantec bulletin...

Symantec AntiVirus Malformed CAB and RAR Compression Remote Vulnerabilities

Description Symantec AntiVirus products that include the Symantec Decomposer are prone to multiple remote vulnerabilities related to the handling of CAB and RAR archives. These issues include a denial-of-service vulnerability and a buffer-overflow vulnerability. Successfully exploiting these issu...

ClamAV / UnRAR - .RAR Handling Remote Null Pointer Dereference

source: https://www.securityfocus.com/bid/24866/info Multiple applications using RAR are prone to a NULL-pointer dereference vulnerability. A successful attack will result in denial-of-service conditions. Attackers may also be able to exploit this issue to execute arbitrary code, but this has not...

ClamAV UnRAR - .RAR Handling Remote Null Pointer Dereference

ClamAV UnRAR - .RAR Handling Remote Null Pointer Dereference source: https://www.securityfocus.com/bid/24866/info Multiple applications using RAR are prone to a NULL-pointer dereference vulnerability. A successful attack will result in denial-of-service conditions. Attackers may also be able to...

ClmAV antivirus / unrar denial of service

NULL pointer dereference on RAR archive parsing...

Debian DSA-1320-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2650 It was discovered that the OLE2 parser can be tricked into an infinite loop and memory exhaustion. - CVE-2007-30...

[SECURITY] [DSA 1320-1] New clamav packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1320-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 23th, 2007 http://www.debian.org/security/faq -...

DSA-1320-1 clamav

Bulletin has no description...

FreeBSD : clamav -- multiple vulnerabilities (903654bd-1927-11dc-b8a0-02e0185f8d72)

Clamav had been found vulnerable to multiple vulnerabilities : - Improper checking for the end of an buffer causing an unspecified attack vector. - Insecure temporary file handling, which could be exploited to read sensitive information. - A flaw in the parser engine which could allow a remote...

Authentication flaw

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a 1 LHA or 2 RAR archive...

CVE-2007-3300

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a 1 LHA or 2 RAR archive...

CVE-2007-3300

CVE-2007-3300 affects multiple F-Secure anti-virus products for Windows and Linux prior to 20070619. The vulnerability allows remote attackers to bypass scanning by exploiting a crafted header in (1) LHA or (2) RAR archives. Root cause is a flaw in header handling that enables bypass of the antiv...