EUVD-2010-1472

Malware in sbrugna...

Debian DSA-3540-1 : lhasa - security update

Marcin Noga discovered an integer underflow in Lhasa, a lzh archive decompressor, which might result in the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

DSA-3540-1 lhasa - security update

Bulletin has no description...

CVE-2010-1444: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly execute arbitrary code via a crafted archive...

Mandrake Linux Security Advisory : clamav (MDKSA-2005:113)

Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. The updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CVE-2005-2056: Undefined Security Weakness

The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...

unarj: Long filenames buffer overflow and a path traversal vulnerability

Background unarj is an ARJ archive decompressor. Description unarj has a bounds checking vulnerability within the handling of long filenames in archives. It also fails to properly sanitize paths when extracting an archive if the "x" option is used to preserve paths. Impact An attacker could trigg...