EUVD-2021-27994

Malicious code in bioql PyPI...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

Design/Logic Flaw

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

The CVE-2021-40837 issue affects the F-Secure antivirus engine prior to Capricorn update 2022-02-01_01. The vulnerability arises during ACE file decompression, triggering a denial-of-service condition where the scanner service stops. It can be exploited remotely by an attacker, leading to availab...

CVE-2021-40837 Denial-of-Service (DoS) Vulnerability

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

Analysis of a targeted attack exploiting the WinRAR CVE-2018-20250 vulnerability

In early March, we discovered a cyberattack that used an exploit for CVE-2018-20250, an old WinRAR vulnerability disclosed just several weeks prior, and targeted organizations in the satellite and communications industry. A complex attack chain incorporating multiple code execution techniques...

Cybercriminals Have a Heyday with WinRAR Bug in Fresh Campaigns

A recently discovered vulnerability in the WinRAR file archival utility has been exploited in a slew of new campaigns, including one with a never-before-seen payload. The flurry of activity shows no sign of waning as cybercriminals continue to find success exploiting the bug. The campaigns take...

Exploit for Path Traversal in Rarlab Winrar

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to explo...

Hidden for 19 years WinRAR code execution vulnerability-vulnerability warning-the black bar safety net

The researchers found WinRAR logic vulnerabilities that can full access to the victims computer control. The exploit only requires from the compressed file to extract it can work, more than 5 million users affected. More importantly, the vulnerability has been there 19 years, forcing WinRAR...

WinRAR ACE File Name Logic Validation Bypass Vulnerability

WinRAR is a compressed package manager, as the archive tool RAR in the Windows environment with a graphical interface, can be used to back up data, compressed files, decompression of RAR/ZIP and other formats of the file, create RAR/ZIP and other formats of compressed files, has been more widely...

CVE-2007-3951

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...

Buffer overflow

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...

CVE-2007-3951

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...

fprot-dos.txt

Name: F-Prot Antivirus for Unix: heap overflow and Denial of Service Vendor: http://www.f-prot.com Release date: 4 Dec, 2006 URL: http://gleg.net/fprot.txt Author: Evgeny Legerov I. DESCRIPTION Two vulnerabilities in F-Prot Antivirus 4.6.6 for Unix platforms could allow a remote attacker to cause...

F-PROT Antivirus畸形ACE文件处理拒绝服务漏洞

F-Prot Antivirus是一款UNIX平台上的杀毒软件。 F-Prot Antivirus在处理特制的ACE压缩文件时会陷入死循环，远程攻击者可能利用此漏洞使F-Prot失去工作能力。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof of concept code for F-Prot 4.6.6...

F-Prot Antivirus 4.6.6 (ACE) Denial of Service Exploit

No description provided by source. fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and...

F-Prot Antivirus 4.6.6 (ACE) Denial of Service Exploit

Exploit for linux platform in category dos / poc ====================================================== F-Prot Antivirus 4.6.6 ACE Denial of Service Exploit ====================================================== fprot1.py - trivial proof of concept code for F-Prot 4.6.6 .ACE DoS Copyright c 2006...