CVE-2005-2618

Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allow remote attackers to execute arbitrary code via 1 a UUE file containing an encoded file with a long filename handled by uudrdr.dll, 2 a compressed ZIP file with a...

IBM Lotus Notes ZIP file handling buffer overflow

Overview IBM Lotus Notes contains a buffer overflow when handling a ZIP file with a large file name. This could allow a remote attacker to execute arbitrary code on a vulnerable system. Description IBM Lotus Notes is an integrated client application that provides functionality including email,...

dtSearch DUNZIP32.dll Buffer Overflow Vulnerability

Networksecurity.fi Security Advisory 21-12-2005 Title: dtSearch DUNZIP32.dll buffer overflow vulnerability Criticality: High 3/3 Affected software: dtSearch versions prior than 7.20 Build 7136 Author: Juha-Matti Laurio info at networksecurity.fi, juha-matti.laurio at netti.fi Date: 21th December,...

CVE-2005-3499

Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file...

CVE-2005-3499

Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file...

Symantec Brightmail AntiSpam: Nested Zip File, Denial of Service

SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | Update Symantec Brightmail AntiSpam | 6....

CVE-2004-2305

Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files...

CVE-2004-2348

Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service hang via an encrypted ZIP file with the "include full path info" option set, as used by certain variants of the Beagle/Bagle worm...

CVE-2004-2220

F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection...

CVE-2004-2220

CVE-2004-2220 affects F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31. The vulnerability is that the product does not reliably detect certain password-protected ZIP files, allowing remote attackers to bypass antivirus protection. Affected component: ZIP/password-protected archive scannin...

iDEFENSE Security Advisory 07.14.05: Sophos Anti-Virus Zip File Handling DoS Vulnerability

Sophos Anti-Virus Zip File Handling DoS Vulnerability iDEFENSE Security Advisory 07.14.05 www.idefense.com/application/poi/display?id=283&type=vulnerabilities July 14, 2005 I. BACKGROUND Sophos Small Business Suite includes the Sophos PureMessage Small Business Edition, combining virus and spam...

CVE-2005-0304

Directory traversal vulnerability in DivX Player 2.6 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in a filename in a ZIP file for a skin...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0133

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service clamd daemon crash via a ZIP file with malformed headers...

CVE-2005-0331

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... triple dot in the filename of the ZIP file...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2005-0519

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut .LNK file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520...

GLSA-200501-46 : ClamAV: Multiple issues

The remote host is affected by the vulnerability described in GLSA-200501-46 ClamAV: Multiple issues ClamAV fails to properly scan ZIP files with special headers CAN-2005-0133 and base64 encoded images in URLs. Impact : By sending a base64 encoded image file in a URL an attacker could evade virus...

CVE-2005-0304

CVE-2005-0304 describes a directory traversal in DivX Player 2.6 and earlier. A specially crafted ZIP file containing a skin allows a remote attacker to overwrite arbitrary files by using a .. in a filename, enabling possible partial availability impact as reflected in the CVSS score. The records...

CVE-2005-0329

CVE-2005-0329: Directory traversal vulnerability in ZipGenius 5.5 and earlier. A ZIP file containing a file name with .. sequences allows remote attackers to create and possibly modify arbitrary files. Affected product: ZipGenius (versions up to 5.5 and earlier). Root cause: improper handling of ...