CVE-2016-4302

A vulnerability was found in libarchive's handling of RAR archives. A specially crafted RAR file can cause a heap overflow, potentially leading to code execution in the context of the application...

libarchive RAR parser heap out-of-bounds read vulnerability

libarchive is a multi-format archive and compression library. A security vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

libarchive RAR Parser Null Pointer Access Vulnerability

libarchive is a multi-format archive and compression library. A null pointer access vulnerability exists in libarchive's RAR parser. An attacker could exploit this vulnerability to cause null pointer access...

Libarchive Rar RestartModel Code Execution Vulnerability

SUMMARY An exploitable heap overflow vulnerability exists in the Rar decompression functionality of libarchive. A specially crafted Rar file can cause a heap corruption eventually leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS...

RAR - BSD license, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RAR published at the 'play' market has multiple vulnerabilities...

win-rar.com XSS vulnerability

Vulnerable URL: http://www.win-rar.com/buy/indexshop.php?AffID=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 03.02.2016 Latest check for patch:| 03.02.2016 02:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

UBUNTU-CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

UBUNTU-CVE-2015-8934

The copyfromlzsswindow function in archivereadsupportformatrar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file...

CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

UBUNTU-CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

CVE-2015-8934

The copyfromlzsswindow function in archivereadsupportformatrar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file...

DLA-250-1 libclamunrar - security update

Bulletin has no description...

Mail.ru: HTML Injection на e.mail.ru

Здравствуйте, Я обнаружил HTML инъекцию на e.mail.ru с помощью текстовых файлов формата .txt Proof of concept: Создаем HTML файл с правильными тегами, то есть html head body... должны присутствовать. Иначе файл не будет воспроизведен как HTML Меняем конец файла на .txt Далее сжимаем этот файл при...

Threat Outbreak Alert RuleID14325: Email Messages Distributing Malicious Software on March 29, 2015

Medium Alert ID: 38096 First Published: 2015 March 30 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14325 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID14083: Email Messages Distributing Malicious Software on March 18, 2015

Medium Alert ID: 37917 First Published: 2015 March 18 16:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14083 may contain the following files: Name | Si...

File Pro Mini v5.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== File Pro Mini v5.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1403 Release Date: ============= 2015-01-15 Vulnerability Laboratory ID VL-ID: ==================================== 1403...

Threat Outbreak Alert RuleID12464: Email Messages Distributing Malicious Software on November 17, 2014

Medium Alert ID: 36440 First Published: 2014 November 17 18:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12464 may contain the following files: Name |...

[SECURITY] Fedora 20 Update: ark-4.14.1-1.fc20

Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed...

Unreal Commander 0.92 - ZIP / RAR Archive Handling Traversal Arbitrary File Overwrite

No description provided by source. source: http://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal vulnerability, an information-disclosure...