1839 matches found
DEBIAN-CVE-2015-8927
The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...
CVE-2015-8923
The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...
CVE-2015-8923
The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...
Out-of-bounds
The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...
CVE-2015-8927
The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...
Design/Logic Flaw
The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...
CVE-2015-8923
CVE-2015-8923 affects libarchive via a vulnerability in the ZIP parser where process_extra uses a size field and a signed offset, enabling a remote attacker to crash the application with a crafted ZIP file. Affected versions referenced include libarchive before 3.2.0. Remediation is to upgrade to...
CVE-2015-8923
The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...
CVE-2015-8927
CVE-2015-8927 affects libarchive: the trad_enc_decrypt_update function in archive_read_support_format_zip.c allows a crafted ZIP file to trigger an out-of-bounds heap read, causing a denial of service. This vulnerability is present in libarchive up to version 3.1.x (pre-3.2.0). Several connected ...
CVE-2015-8927
The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...
CVE-2015-8923
The processextra function in libarchive before 3.2.0 uses the size field and a signed number in an offset, which allows remote attackers to cause a denial of service crash via a crafted zip file...
libarchive: zip_read_mac_metadata() heap-based buffer overflow
A vulnerability was found in libarchive. A specially crafted zip file can provide an incorrect compressed size, which may allow an attacker to place arbitrary code on the heap and execute it in the context of the application...
libarchive: arbitrary code execution
A vulnerability was found in libarchive. A specially crafted zip file can provide an incorrect compressed size, which may allow an attacker to place arbitrary code on the heap and execute it in the context of the application...
[SECURITY] Fedora 22 Update: php-pecl-zip-1.12.5-2.fc22
Zip is an extension to create and read zip files...
Cisco Email Security Appliance .zip File Scanning Security Bypass Vulnerability
A vulnerability in the anti-spam filter of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass anti-spam filtering functionality on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a reference...
Android security development of ZIP file directory traversal-vulnerability warning-the black bar safety net
ZIP compressed package file to allow the presence of“../”string, an attacker can carefully construct the ZIP file, use multiple“../”thereby changing the ZIP package to a file in the storage position, the cover to replace the application the original file. If the overwritten file is available. so...
Cisco Email Security Appliance AsyncOS Security Bypass Vulnerability
Cisco AsyncOS on Email Security Appliance ESA is a set of operating systems running in the Email Security Appliance ESA from Cisco USA. A security bypass vulnerability exists in Cisco AsyncOS version 9.7.0-125 on Cisco ESA appliances. A remote attacker could exploit this vulnerability to bypass...
CVE-2015-8927
The tradencdecryptupdate function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service out-of-bounds heap read and crash via a crafted zip file, related to reading the password...