CVE-2007-3699

CVE-2007-3699 affects the Decomposer component in multiple Symantec products, enabling remote attackers to trigger a denial of service (infinite loop) by crafting the PACK_SIZE field in a RAR header. Connected Nessus entries reiterate this as part of “Symantec Mail Security Engine/Scanner” vulner...

Sophos Anti-Virus CAB, RAR and LZH Scanning Evasion

The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'CAB' 'RAR' and 'LZH' files which may allow an attacker to evade the anti- virus scanning by sending a specially-malformed archive. In addition, an attacker may exploit a...

CVE-2007-4545

Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. dot dot in a filename within a 1 ZIP or 2 RAR archive...

Directory traversal

Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. dot dot in a filename within a 1 ZIP or 2 RAR archive...

CVE-2007-4545

CVE-2007-4545 describes multiple directory traversal vulnerabilities in Unreal Commander 0.92 builds 565 and 573. The flaw allows user-assisted remote attackers to create or overwrite arbitrary files via a .. path segment in a filename inside a (1) ZIP or (2) RAR archive. The connected documents ...

CVE-2007-4545

Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. dot dot in a filename within a 1 ZIP or 2 RAR archive...

Unreal Commander畸形压缩文档多个远程漏洞

BUGTRAQ ID: 25419 Unreal Commander是一款免费的Windows平台文件管理器。 Unreal Commander在解压文件时存在多个安全漏洞，攻击者可能通过诱使用户处理恶意文件控制用户系统。 如果用户使用Unreal Commander解压了文件名包含有类似于以下目录遍历序列的ZIP或RAR文档的话： Something/../../../../../../Program Files/Something/ws232.dll 就会导致在指定目录中创建ws232.dll文件。 ZIP文档中包含有两处写入文件名的位置：Local文件头和Central...

Unreal Commander 0.92 - ZIP / RAR Archive Handling Traversal Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal vulnerability, an information-disclosure vulnerability, and a filename-spoofing...

Unreal Commander 0.92 - ZIP RAR Archive Handling Traversal Arbitrary File Overwrite

Unreal Commander 0.92 - ZIP RAR Archive Handling Traversal Arbitrary File Overwrite source: https://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal...

GLSA-200708-04 : ClamAV: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200708-04 ClamAV: Denial of Service Metaeye Security Group reported a NULL pointer dereference in ClamAV when processing RAR archives. Impact : A remote attacker could send a specially crafted RAR archive to the clamd daemon,...

ClamAV: Denial of service

Background ClamAV is a GPL virus scanner. Description Metaeye Security Group reported a NULL pointer dereference in ClamAV when processing RAR archives. Impact A remote attacker could send a specially crafted RAR archive to the clamd daemon, resulting in a crash and a Denial of Service. Workaroun...

Mandrake Linux Security Advisory : clamav (MDKSA-2007:150)

A vulnerability in the RAR VM in ClamAV allowed user-assisted remote attackers to cause a crash via a crafted RAR archive which resulted in a NULL pointer dereference. Other bugs have also been corrected in 0.91.1 which is being provided with this update. %NASLMINLEVEL 70300 C Tenable Network...

[Full-disclosure] [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35525, 35526: CA Products Arclib Library Denial of Service Vulnerabilities CA Vuln ID CAID: 35525, 35526 CA Advisory Date: 2007-07-24 Reported By: CVE-2006-5645 - Titon of BastardLabs and Damian Put pucik at overflow dot pl working with th...

Computer Associates AntiVirus DoS

Buffer overflow on CHM and RAR files parsing...

DSA-1340-1 clamav - null pointer dereference

Bulletin has no description...

Symantec AntiVirus畸形CAB和RAR文件解压堆溢出及拒绝服务漏洞

BUGTRAQ ID: 24282 CVECAN ID: CVE-2007-3699,CVE-2007-0447 Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec AntiVirus没有正确地处理RAR文件头中的伪造PACKSIZE字段；如果将该字段设置为特定值的话，则扫描器在处理该文件时就可能触发死循环，导致拒绝服务。 Symantec AntiVirus引擎在扫描多个恶意格式的CAB文档时还存在堆溢出漏洞，如果用户受骗打开了特制的CAB文件的话就可能导致执行任意指令。 Symantec AntiVirus Scan Engine = 4.3.12...

[Full-disclosure] ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability

ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-039.html July 12, 2007 -- CVE ID: CVE-2007-3699 -- Affected Vendor: Symantec -- Affected Products: Symantec AntiVirus Engine -- TippingPointTM IPS Customer Protection:...

Symantec Antivirus multiple buffer overflows

Buffer overflows on CAB, RAR archives parsing...

DEBIAN-CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...