1839 matches found
CVE-2017-8314
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles...
[ASA-201705-15] zziplib: multiple issues
Arch Linux Security Advisory ASA-201705-15 ========================================== Severity: High Date : 2017-05-12 CVE-ID : CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5979 CVE-2017-5981 Package : zziplib Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-191...
HPE Intelligent Management Center CommonUtils ZIP Directory Traversal (CVE-2017-5793)
A directory traversal vulnerability exist in HPE Intelligent Management Center. The vulnerability is due to a lack of proper input sanitization on uploaded ZIP files handled by the CommonUtils class. A remote attacker can exploit this vulnerability by sending an HTTP request containing a...
Trend Micro Threat Discovery Appliance 2.6.1062r1 dlp_policy_upload.cgi Remote Code Execution
!/usr/local/bin/python """ Trend Micro Threat Discovery Appliance /opt/TrendMicro/MinorityReport/bin/ Then, all we do is create /engptnstores/prod/sensorSDK/data/si/dlpkill.sh with malicious code and get it executed... Notes: ====== - For this particular PoC, all I did was exec a bind shell using...
Remote Code Execution (RCE)
Haraka is vulnerable to remote code execution RCE. A malicious user can pass a malicious zip file as an attachment to execute arbitrary code...
Denial Of Service (DoS) Through Heap-based Buffer Overflow
zziplib is vulnerable to denial of service DoS attacks. Attackers can trigger heap-based buffer overflow through a ZIP file in the zzipget32 function in fetch.c...
Denial Of Service (DoS)
zziplib is vulnerable to denial of service DoS attacks. Attackers can trigger heap-based buffer overflow through a ZIP file in the zzipget64 function in fetch.c...
Denial Of Service (DoS) Through An Invalid Memory Read And Crash
zziplib is vulnerable to denial of service DoS attacks. Attackers are able to cause invalid memory reads and crashes through a ZIP file when it is processed in the zzipmementryextrablock function in memdisk.c...
Denial Of Service (DoS)
zziplib is vulnerable to denial of service DoS attacks. These attacks can be performed using a ZIP file in memdisk.c to cause out-of-bound reads and crashes...
Denial Of Service (DoS) Through Null Pointer Dereference
zziblip is vulnerable to denial of service DoS attacks. These attacks are possible using a zip file in memdisk.c allowing attackers to cause a null pointer dereference and crash...
Denial Of Service (DoS)
zziplib is vulnerable to denial of service DoS attacks. These attacks can be performed through a flaw in seeko.c and a ZIP file...
CVE-2017-5976
Heap-based buffer overflow in the zzipmementryextrablock function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5981
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file...
CVE-2017-5980
The zzipmementrynew function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
CVE-2017-5974
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
AZL-43603 CVE-2017-5974 affecting package zziplib 0.13.72-3
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...
CVE-2017-5981
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service assertion failure and crash via a crafted ZIP file...
CVE-2017-5979
The prescanentry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted ZIP file...
AZL-45219 CVE-2017-5974 affecting package zziplib for versions less than 0.13.74-1
Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service crash via a crafted ZIP file...