9822 matches found
Heap overflow
Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in 1 a PSP image to the IDPSP.apl plug-in or 2 an LHA archive to the...
CVE-2007-4344
CVE-2007-4344 involves heap-based buffer overflows in ACDSee products: PSP images processed by ID_PSP.apl and LHA archives by AM_LHA.apl, leading to remote code execution with user-assisted input. Affects ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 bui...
[SECURITY] Fedora 7 Update: kdeutils-3.5.8-2.fc7
Utilities for the K Desktop Environment. Includes: ark tar/gzip archive manager; kcalc scientific calculator; kcharselect character selector; kdepasswd change password; kdessh ssh front end; kdf view disk usage; kedit simple text editor; kfloppy floppy formatting tool; kgpg gpg gui khexedit hex...
Perl Archive::Tar模块远程目录遍历漏洞
BUGTRAQ ID: 26355 CVECAN ID: CVE-2007-4829 Archive::Tar是Perl中用于操控tar文档的模块。 Archive::Tar模块在解压tar文档时存在输入验证错误，如果所解压到文档中包含有目录遍历序列的话，就可以将文件解压到指定目录以外的任意位置。 CPAN Archive::Tar 1.36 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cpan.org...
Mozilla-based browsers jar: URI cross-site scripting vulnerability
Overview Mozilla-based web browsers including Firefox contain a vulnerability that may allow an attacker to execute code, or conduct cross-site scripting attacks. Description The jar: protocol is designed to extract content from ZIP compressed files. Mozilla-based browsers include support for jar...
[SECURITY] Fedora 8 Update: cpio-2.9-5.fc8
GNU cpio copies files into or out of a cpio or tar archive. Archives are files which contain a collection of other files plus information about them, such as their file name, owner, timestamps, and access permissions. The archive can be another file on the disk, a magnetic tape, or a pipe. GNU cp...
[SECURITY] Fedora 8 Update: tar-1.17-4.fc8
The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
Directory traversal
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
DEBIAN-CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
CVE-2007-4829
The CVE-2007-4829 entry concerns a directory-traversal flaw in the Archive::Tar Perl module (versions
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
CVE-2007-4829
Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...
GLSA-200710-23 : Star: Directory traversal vulnerability
The remote host is affected by the vulnerability described in GLSA-200710-23 Star: Directory traversal vulnerability Robert Buchholz of the Gentoo Security team discovered a directory traversal vulnerability in the hasdotdot function which does not identify //.. slash slash dot dot sequences in...
openSUSE 10 Security Update : clamav (clamav-3531)
This update of ClamAV fixes several security bugs. - wrong calculation of buffer-end - use strict permissions for temporary files - heap corruption causing denial-of-service with corrupted rar archive - detect block list loop %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
openSUSE 10 Security Update : unrar (unrar-2996)
This update fixes a stack-absed buffer overflow in unrar that can be exploited with user-assistence by sending a password-protected archive. CVE-2007-0855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
openSUSE 10 Security Update : gzip (gzip-2084)
This update fixes several security problems that can be exploited to compromise the system in conjunction with other programs while processing malformated archive files. CVE-2006-4334,CVE-2006-4335,CVE-2006-4336,CVE-2006-4337,CVE -2006-4338 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...