ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31124/info ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when performing virus scans on long directory paths...

Buffer overflow

Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information...

CVE-2008-7009: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information...

ZoneAlarm Security Suite反病毒目录路径缓冲区溢出漏洞

BUGTRAQ ID: 31124 CNCAN ID：CNCAN-2008091206 ZoneAlarm Security Suite保护电脑免受黑客，病毒， 蠕虫病毒，木马，系统漏洞等的危害的安全套件。 ZoneAlarm Security Suite反病毒组件不能解析超长路径，远程攻击者可以利用漏洞触发缓冲区溢出，可能导致系统不受反病毒保护，或任意代码执行。 构建超长路径的恶意文件包，提交给ZoneAlarm Security Suite反病毒组件可触发此漏洞。 Zone Labs ZoneAlarm Internet Security Suite 7.0 目前没有解决方案提供:...

ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/31124/info ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when performing virus scans on long directory paths. Remote attackers may leverage thi...

CVE-2005-2932: Undefined Security Weakness

Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure default permissions for critical files, which allows local users to gain privileges or bypass security controls...

CVE-2005-1693: Undefined Security Weakness

Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup BAB r11.1, Vet Antivirus, Zonelabs...

[Full-disclosure] Computer Associates Vet Antivirus Library Remote Heap Overflow

Date May 23, 2005 Vulnerability Computer Associates Vet library provides antivirus scan engine capabilities. Vet scan engines allow products to analyze various streams for malware. Vet is vulnerable to an integer wrap during the analysis of an OLE stream. The integer wrap causes an arbitrary heap...