CVE-2008-3075

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a ZIP archive and possibly 2 the filename of the first file in a ZIP archive, which is not properly...

JRE allows unauthorized memory read access via a crafted ZIP file

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

eDContainer v2.22 (lg) Local File Inclusion Vulnerability

No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | eDContainer v2.22 lg Local File Inclusion Vulnerability Script :...

PHP Security Bypass and File Writing Vulnerabilities (Dec 2008)

PHP is prone to a security bypass and a file writing vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...

CVE-2008-5658

Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. dot dot sequences...

Sun Java JDK/JRE安全更新修复多个漏洞

BUGTRAQ ID: 32620,32608 CVECAN ID:...

Design/Logic Flaw

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

CVE-2008-5346

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

CVE-2008-5346

CVE-2008-5346 affects Sun JDK/JRE: untrusted applets and applications could read arbitrary memory via a crafted ZIP file. Affected are JRE/JDK 5.0 Update 16 and earlier; JRE 1.4.2_18 and earlier; JRE 1.3.1_23 or earlier. The connected docs confirm related advisories (e.g., RHSA entries) but do no...

JRE allows unauthorized memory read access via a crafted ZIP file

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file...

CVE-2008-4779

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

Stack overflow

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

CVE-2008-4779

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service crash or execute arbitrary code via a long filename in a .zip file...

TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerability

This module exploits a stack-based buffer overflow vulnerability in the latest version 3.5 of TugZip archiving utility. In order to trigger the vulnerability, an attacker must convince someone to load a specially crafted zip file with TugZip by double click or file open. By doing so, an attacker...

Fastpublish CMS 1.9999 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: fastpublish CMS Version: 1.9.9.9.9.d URL: www.fastpublish.de Download: http://www.fastpublish.de/richfiles/attachments/downloads/fastpublish19999dtrial.zip Vulnerability Class: SQL Injection SQL Injection Exploit 1:...

CVE-2008-4323

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

EUVD-2008-4304

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

CVE-2008-4323

CVE-2008-4323 affects Windows XP SP3: Windows Explorer may crash (DoS) when handling a specially crafted .ZIP file. The vulnerability is described as user-assisted (not remote) and affects Explorer functionality, with no details on a patch or workaround provided in the connected documents. No add...

CVE-2008-4323

Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service application crash via a crafted .ZIP file...

MS Windows Explorer Unspecified .ZIP File Denial of Service Exploit

No description provided by source. Sucessfully tested on Microsoft Windows Xp Pro sp3 English. If you open with Winzip sometimes the exeption doesen't occur. Just right click the file and explorer will crash. |--- CMP BYTE PTR DS:EDX+EAX-1,2E ESP 0007E328 EBP 0007E358 Access Violation FFFFFFFF --...