Lucene search
+L

1299 matches found

Prion
Prion
added 2012/03/21 10:11 a.m.26 views

Design/Logic Flaw

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

4.3CVSS6.9AI score0.99636EPSS
SaveExploits0References17Affected Software35
UbuntuCve
UbuntuCve
added 2012/03/21 10:11 a.m.45 views

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

4.3CVSS5.9AI score0.99636EPSS
SaveExploits0References2
OSV
OSV
added 2012/03/21 10:11 a.m.9 views

PYSEC-2012-24

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

6.9AI score
SaveExploits0References17
Cvelist
Cvelist
added 2012/03/21 10:00 a.m.40 views

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

6.3AI score0.99636EPSS
SaveExploits0References17
CVE
CVE
added 2012/03/21 10:00 a.m.92 views

CVE-2012-1443

CVE-2012-1443 describes a bypass in the RAR file parser used by multiple antivirus products (e.g., ClamAV 0.96.4-related integrations and several vendors) where a RAR file starting with an MZ character sequence can be analyzed by user-assisted remote attackers to bypass malware detection. The evi...

4.3CVSS6.5AI score0.99636EPSS
SaveExploits0References17Affected Software35
zdt
zdt
added 2011/09/24 12:00 a.m.16 views

Dziobas Rar Player Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/env python 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local,...

6.8AI score
SaveExploits0
zdt
zdt
added 2011/09/04 12:00 a.m.23 views

ZipX for Windows v1.71 ZIP File Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: ZipX for Windows v1.71 ZIP File Buffer Overflow Exploit +Date: 05\09\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipX/3000-22504-10518937.html +Version: v1.71 +Tested On: WIN-XP SP3...

6.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2011/03/21 5:05 p.m.13 views

wireshark: buffer overflow in MAC-LTE disector (upstream bug #5530)

Buffer overflow in the MAC-LTE dissector epan/dissectors/packet-mac-lte.c in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of RARs...

10CVSS6.3AI score0.07169EPSS
SaveExploits0References4
CVE
CVE
added 2011/01/12 11:00 p.m.70 views

CVE-2011-0444

CVE-2011-0444 affects Wireshark’s MAC-LTE dissector (epan/dissectors/packet-mac-lte.c). A buffer overflow in Wireshark 1.2.0–1.2.13 and 1.4.0–1.4.2 can be triggered by processing a crafted large number of RARs, leading to a crash or possibly arbitrary code execution via network input. Public advi...

10CVSS7.8AI score0.07169EPSS
SaveExploits0References17Affected Software1
Exploit DB
Exploit DB
added 2010/09/20 12:00 a.m.40 views

RarCrack 0.2 - 'Filename init() .bss' (PoC)

The software can be downloaded here: http://rarcrack.sourceforge.net/ Author: stoke Date: 2010-09-20 Download: http://rarcrack.sourceforge.net/ Tested on: Backtrack 4 Site: http://devilcode.it | http://hack2web.altervista.org Special greetz to: nex, for reassure me when i sayed "WHY EIP IT'S NOT...

5.3AI score
SaveExploits0
zdt
zdt
added 2010/09/06 12:00 a.m.25 views

IZArc DLL Hijacking (ztv7z.dll) Exploit

Exploit for windows platform in category local exploits ======================================= IZArc DLL Hijacking ztv7z.dll Exploit ======================================= / Exploit Title: IZArc DLL Hijacking Exploit ztv7z.dll Date: 01/09/2010 Author: Anastasios Monachos secuid0 -...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2010/04/14 12:00 a.m.39 views

F-Secure Products Archive Files Scan Evasion (2010-1)

The remote host has an antivirus product from F-Secure installed. According to its version, the product fails to accurately scan specially crafted 7Z, GZIP, CAB, and RAR archive files. It is, therefore, possible for such files to evade detection from the scanning engine. C Tenable Network Securit...

5CVSS5.4AI score0.02151EPSS
SaveExploits0References2
Check Point Advisories
Check Point Advisories
added 2010/02/24 12:00 a.m.15 views

WinACE RAR and TAR Directory Traversal (CVE-2006-0981)

WinACE Archiver is an application that can compress to and decompress from various archive formats. The compression mainly supports ACE, LZA, MS-CAB, ZIP archive formats, however the decompression support includes a wider range of compression formats including TAR, RAR, and others. There exists a...

4CVSS6.8AI score0.01884EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2009/12/14 12:00 a.m.22 views

Mandriva Security Advisory MDVSA-2009:327 (clamav)

The remote host is missing an update to clamav announced via advisory MDVSA-2009:327. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

10CVSS7.5AI score0.0759EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2009/12/09 12:00 a.m.28 views

Mandriva Linux Security Advisory : clamav (MDVSA-2009:327)

Multiple vulnerabilities has been found and corrected in clamav : Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive CVE-2009-1241. libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of...

10CVSS5.9AI score0.0759EPSS
SaveExploits1References5
Kaspersky
Kaspersky
added 2009/11/09 12:00 a.m.40 views

KLA10094 DoS vulnerabilities in CA products

An unspecified vulnerability was found in CA products. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited from the network at a point related to arclib via a specially designed RAR archive. Original...

9.3CVSS7.8AI score0.07605EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2009/10/29 12:00 a.m.42 views

CA Multiple Products 'arclib' Component DoS Vulnerability (Windows)

This host is installed with CA Multiple Products and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodcamultprdtsarclibdosvulnwin.nasl 6517 2017-07-04 13:34:20Z cfischer $ CA Multiple Products 'arclib' Component DoS Vulnerability Windows Authors: Nikita MR...

9.3CVSS0.3AI score0.07605EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2009/10/29 12:00 a.m.18 views

CA Multiple Products 'arclib' Component DoS Vulnerability - Windows

CA Multiple Products is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.3AI score0.07605EPSS
SaveExploits1References5
Prion
Prion
added 2009/10/13 10:30 a.m.22 views

Design/Logic Flaw

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

9.3CVSS7.9AI score0.07605EPSS
SaveExploits1References8Affected Software19
NVD
NVD
added 2009/10/13 10:30 a.m.24 views

CVE-2009-3587

Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise formerly eTrust Antivirus 7.1 through r8.1; Anti-Virus 2007 v8 through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 v3 through Plus 2009; and other CA products allows...

9.3CVSS7.5AI score0.07605EPSS
SaveExploits1References8
Rows per page
Query Builder