Ordinary file deception-vulnerability warning-the black bar safety net

Source: whytt's Blog Have a very want to get the permission of the Forum, and suddenly see the administrator collection XX information, photos, and open up an FTP upload, so the thought of the bundled Trojan file to trick the administrator of the method. I used to use windows comes with IEXPRESS...

CVE-2007-1457

CVE-2007-1457 describes a buffer overflow in the urarlib_get function of Christian Scheurer’s UniquE RAR File Library (unrarlib/URARFileLib) v0.4. An attacker can cause arbitrary code execution by passing a long filename, rarfile, or libpassword to urarlib_get. The entry notes arbitrary code exec...

CVE-2007-1457

Buffer overflow in the urarlibget function in Christian Scheurer UniquE RAR File Library unrarlib, aka URARFileLib 0.4 allows context-dependent attackers to execute arbitrary code via a long 1 filename, 2 rarfile, or 3 libpassword argument...

FreeBSD : rar -- password prompt buffer overflow vulnerability (94234e00-be8a-11db-b2ec-000c6ec775d9)

iDefense reports : Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker to execute arbitrary code with the privileges of the user opening the archive. Unrar is prone to a stack based buffer overflow when processing specially crafted password...

GLSA-200702-04 : RAR, UnRAR: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200702-04 RAR, UnRAR: Buffer overflow RAR and UnRAR contain a boundary error when processing password-protected archives that could result in a stack-based buffer overflow. Impact : A remote attacker could entice a user to process...

RAR, UnRAR: Buffer overflow

Background RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files. Description RAR and UnRAR contain a boundary error when processing password-protected archives that could result in a stack-based buffer overflow. Impact A remote attacker could entice a user to...

eXtreme File Hosting remote file upload vulnerability

A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...

CVE-2006-6960

The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...

CVE-2006-6960

The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...

Total Commander任意文件删除漏洞

Total Commander是一款磁盘文件管理软件。 Total Commander存在输入验证错误，本地攻击者可以利用漏洞删除任意系统文件。 问题是Total Commander处理恶意构建的RAR文件存在问题，由于输入验证问题，可导致删除或者破坏系统文件，造成拒绝服务攻击。 Total Commander Total Commander 升级程序： Total Commander Total Commander 0 Total Commander Total Commander 6.56 http://www.ghisler.com/download.htm...

Information disclosure

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Total Commander up to version 6.5.5 is affected by an unspecified vulnerability that allows user-assisted remote attackers to delete arbitrary files and corrupt the filesystem via a crafted RAR file. The issue is described in multiple sources as affecting Total Commander before 6.5.6; CVSS-derive...

Sophos Anti-Virus multiple security vulnerabilities

Crash on parsing malformed RAR, CHM and petite-packed files. Buffer overflow on CPIO and SIT archives parsing...

CVE-2006-6458

The CVE-2006-6458 entry affects the Trend Micro scan engine before 8.320 on Windows and before 8.150 on HP-UX/AIX, used in Trend Micro PC Cillin Internet Security 2006, Office Scan 7.3, and Server Protect 5.58. Root cause: processing a malformed RAR archive where the Archive Header head_size and ...

多个Trend Micro Antivirus RAR档远程拒绝服务漏洞

Trend Micro Antivirus是一款商业性质的反病毒程序。 Trend Micro Antivirus处理畸形RAR档存在问题，远程攻击者利用漏洞对应用程序进行拒绝服务攻击。 提交畸形RAR档，其档头字段的headsize和packsize字段数据设置为0，可导致病毒扫描引擎处理时进入无限循环，而使应用程序崩溃，失去检测能力。 Trend Micro Server Protect 5.58 Trend Micro PC Cillin - Internet Security 2006 0 Trend Micro Office Scan 7.3...

Sophos / Trend Micro Antivirus RAR File Denial of Service PoC

Exploit for multiple platform in category dos / poc ============================================================= Sophos / Trend Micro Antivirus RAR File Denial of Service PoC ============================================================= http://www.inj3ct0r.com/sploits/6241.rar 0day.today 2018-03...

Sophos / Trend Micro AntiVirus - '.RAR' File Denial of Service (PoC)

Multiple Vendor Antivirus RAR File Denial of Service Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2912.rar 12102006-sophosintifiniti.rar milw0rm.com 2006-12-10...

[Full-disclosure] iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability

Multiple Vendor Antivirus RAR File Denial of Service Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND AntiVirus products typically handle searching files for known viruses within their scan engines. Most scan engin...