1812 matches found
CVE-2009-1058
ZipGenius is affected by a stack-based buffer overflow in its ZIP handling that could allow remote attackers to execute arbitrary code via a crafted ZIP file that triggers an SEH overwrite. The NVD entry for CVE-2009-1058 notes a possible overlap with CVE-2005-3317 and explicitly states that it h...
CVE-2009-1058
Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for...
CVE-2009-1059
Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product...
CVE-2009-1028
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file...
CVE-2008-3075
The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a ZIP archive and possibly 2 the filename of the first file in a ZIP archive, which is not properly...
JRE allows unauthorized memory read access via a crafted ZIP file
Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...
eDContainer v2.22 (lg) Local File Inclusion Vulnerability
No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | eDContainer v2.22 lg Local File Inclusion Vulnerability Script :...
PHP Security Bypass and File Writing Vulnerabilities (Dec 2008)
PHP is prone to a security bypass and a file writing vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...
CVE-2008-5658
Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. dot dot sequences...
Sun Java JDK/JRE安全更新修复多个漏洞
BUGTRAQ ID: 32620,32608 CVECAN ID:...
Design/Logic Flaw
Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...
CVE-2008-5346
CVE-2008-5346 affects Sun JDK/JRE: untrusted applets and applications could read arbitrary memory via a crafted ZIP file. Affected are JRE/JDK 5.0 Update 16 and earlier; JRE 1.4.2_18 and earlier; JRE 1.3.1_23 or earlier. The connected docs confirm related advisories (e.g., RHSA entries) but do no...
CVE-2008-5346
Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...
JRE allows unauthorized memory read access via a crafted ZIP file
Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...
CVE-2008-4779
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...
Stack overflow
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...
CVE-2008-4779
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...
Fastpublish CMS 1.9999 (LFI/SQL) Multiple Remote Vulnerabilities
No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...
