JRE allows unauthorized memory read access via a crafted ZIP file

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

CVE-2008-4779

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

Stack overflow

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

CVE-2008-4779

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

Fastpublish CMS 1.9999 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...

CVE-2008-4323

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

EUVD-2008-4304

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

CVE-2008-4323

CVE-2008-4323 affects Windows XP SP3: Windows Explorer may crash (DoS) when handling a specially crafted .ZIP file. The vulnerability is described as user-assisted (not remote) and affects Explorer functionality, with no details on a patch or workaround provided in the connected documents. No add...

CVE-2008-4323

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

MS Windows Explorer Unspecified .ZIP File Denial of Service Exploit

No description provided by source. Sucessfully tested on Microsoft Windows Xp Pro sp3 English. If you open with Winzip sometimes the exeption doesen't occur. Just right click the file and explorer will crash. |--- CMP BYTE PTR DS:EDX+EAX-1,2E ESP 0007E328 EBP 0007E358 Access Violation FFFFFFFF --...

FreeBSD Ports: clamav

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Multiple AntiVirus (zip file) Detection Bypass Exploit

No description provided by source. / zipbrk.c - Proof-of-Concept for CAN-2004-0932 - CAN-2004-0937 Copyright C 2004 oc.192 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200804-06 UnZip: User-assisted execution of arbitrary code Tavis Ormandy of the Google Security Team discovered that the NEEDBITS macro in the inflatedynamic function in the file inflate.c can be invoked using invalid buffers, whi...

CVE-2007-6060

AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service machine crash and possibly execute arbitrary code via a ZIP file in which this...

Code injection

AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service machine crash and possibly execute arbitrary code via a ZIP file in which this...

CVE-2007-6060

AhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service machine crash and possibly execute arbitrary code via a ZIP file in which this...

CVE-2007-6060

CVE-2007-6060 affects AhnLab Antivirus 3 Internet Security 2008 Platinum. The ZIP header’s Filename length field can be larger than the actual filename, to which the program appends data, allowing a remote attacker to cause a denial of service (machine crash) and potentially execute arbitrary cod...

Web Mayhem: Firefox’s JAR: Protocol issues

Web Mayhem: Firefox’s JAR: Protocol issues published: November 7th, 2007 One of the things that we enjoy the most, here in GNUCITIZEN, is finding issues with features. Unlike bugs, insecure features tend to be more severe and usually last longer due to uneasy and rather long decision making proce...

CVE-2003-1451

CVE-2003-1451 affects Symantec Norton AntiVirus 2002. A buffer overflow can be triggered by an e‑mail attachment containing a ZIP file with a long filename, allowing remote code execution. This is the base description from multiple sources (NVD/CVE entries). The connected documents confirm the vu...

eXtreme File Hosting remote file upload vulnerability

A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...