KLA10060 ACE vulnerability in Kazaa & Grokster

A buffer overflow vulnerability was found in Kazaa & Grokster. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to Altnet Download Manager via a specially designed installation method call. Origina...

KLA10100 ACE vulnerability in CenterTools DriveLock

A buffer overflow was found in CenterTools DriveLock. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via specially designed HTTP request. Original advisories - Related products CenterTools-DriveLock CVE list CVE-2007-5209...

Stack overflow

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

CVE-2007-5155

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

CVE-2007-5155

IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow...

Design/Logic Flaw

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

CVE-2007-5025

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...

CVE-2007-0061

The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075 and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528 allows remote attackers ...

Code injection

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...

CVE-2007-4496

The CVE-2007-4496 issue affects VMware products: VMware Workstation (before 5.5.5.56455), VMware Player (before 1.0.5.56455 and Player 2 before 2.0.1 55017), ACE (before 1.0.3.54075 and ACE 2 before 2.0.1 55017), and VMware Server (before 1.0.4 56528). It allows an authenticated guest OS user wit...

CVE-2007-5025

Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulation of "images stored in virtual machines downloaded by the user."...

CVE-2007-0061

The DHCP server in VMware products is affected: VMware Workstation (before 5.5.5.56455 and 6.x before 6.0.1.55017), VMware Player (before 1.0.5.56455 and Player 2 before 2.0.1.55017), ACE (before 1.0.3.54075 and ACE 2 before 2.0.1.55017), and VMware Server (before 1.0.4.56528) allows remote attac...

CVE-2007-0063

CVE-2007-0063 affects the DHCP server in VMware-related products (Workstation, Player, ACE, Server) prior to the listed builds. An integer underflow in the DHCP server can trigger a stack-based buffer overflow when processing malformed DHCP packets, enabling remote code execution. Mitigation in t...

CVE-2007-5025

CVE-2007-5025 concerns EMC VMware ACE before 1.0.3 Build 54075. The vulnerability arises from an unspecified manipulation of images stored in virtual machines downloaded by the user, with an unknown impact described in the source materials. The available connected documents confirm the product/ve...

VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2007-0006 Synopsis: Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMwa...

KLA11447 ACE vulnerability in WinSCP

Interpretation conflict vulnerability was found in WinSCP. Malicious users can exploit this vulnerability remotely to execute arbitrary code. Original advisories - Related products WinSCP CVE list CVE-2007-4909 critical Solution Update to the latest version Download WinSCP Impacts ACE Arbitrary...

KLA10397 ACE vulnerability in MSN & Live

A buffer overflow was found in Microsoft Live. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories - Related products Microsoft-MSN-Messenger Windows-Live-Messenger CVE list...

KLA10408 ACE vulnerability in Yahoo! Widgets

A buffer overflow was found in Yahoo! Widgets. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed argument. Original advisories - Related products Yahoo!-Widgets CVE list CVE-2007-4034 critical Solutio...

Norman Virus Control LZH及.ACE文件解析缓冲区溢出漏洞

BUGTRAQ ID: 25003,25015 Norman Virus Control是欧洲一个著名的杀毒软件。 Norman Virus Control的文件解析引擎没有正确的解析.LZH和.ACE文件，如果用户受骗打开了畸形的.LZH或.ACE文件的话，就可能触发缓冲区溢出，导致在用户系统上执行任意指令。 Norman Virus Control = 5.90 Norman ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.norman.com/...

Buffer overflow

Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted 1 ACE or 2 LZH file, resulting from an "integer cast around."...