CVE-2007-4464

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

Buffer overflow

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2007-4463

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2007-4463

The CVE-2007-4463 entry concerns the Fileinfo 2.0.9 plugin for Total Commander. Affected component: PE file handling within the plugin, specifically invalid RVA address function pointers in IMAGE_THUNK_DATA (OriginalFirstThunk/FirstThunk) and IMAGE_EXPORT_DIRECTORY’s AddressOfNames. Root cause: m...

CVE-2007-4464

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

CVE-2007-4463

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2007-4464

The CVE-2007-4464 entry describes a CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander. The issue affects the plugin’s handling of PE exports: an attacker could inject CRLF sequences into the IMAGE_EXPORT_DIRECTORY data, enabling spoofing of information shown in the Ima...

Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities

Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/25373/info The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malform...

Total Commander FileInfo 2.09 Plugin - Multiple PE File Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/25373/info The FileInfo plugin for Total Commander is prone to multiple PE file denial-of-service vulnerabilities because the plugin fails to properly handle malformed input. Successfully exploiting these issues allows remote attackers to crash the affect...

Race condition

The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack...

CVE-2007-1529

The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack...

CVE-2007-1529

The CVE describes a race-condition vulnerability in the LLTD Responder of Microsoft Windows Vista. If another host sends a spoofed DISCOVERY response first, the Mapper may not receive a response, enabling remote attackers to spoof arbitrary hosts via a network-based Total Spoof attack. The primar...

Stack overflow

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

The CVE-2007-0949 issue affects iTinySoft Studio Total Video Player (version 1.03, and possibly earlier; later reports include 1.20 and 1.30) and is caused by a stack-based buffer overflow when parsing .m3u playlist files containing a long file name. This leads to remote arbitrary code execution....

CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

iTinySoft Studio Total Video Player buffer overflow

Buffer overflow on .m3U files parsing...

Total Commander任意文件删除漏洞

Total Commander是一款磁盘文件管理软件。 Total Commander存在输入验证错误，本地攻击者可以利用漏洞删除任意系统文件。 问题是Total Commander处理恶意构建的RAR文件存在问题，由于输入验证问题，可导致删除或者破坏系统文件，造成拒绝服务攻击。 Total Commander Total Commander 升级程序： Total Commander Total Commander 0 Total Commander Total Commander 6.56 http://www.ghisler.com/download.htm...

Information disclosure

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...