CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

DEBIAN-CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

CVE-2007-3726

The CVE-2007-3726 issue is a signedness error in SET_VALUE (rarvm.cpp) in unrar 3.70 beta 3, used in WinRAR and RAR for OS X. A crafted RAR archive can cast a negative signed value to a large unsigned value, causing a denial of service (crash). No patch/version details are provided in the connect...

CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

Stack overflow

Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large LHA "Extended Header Size" value in an LZH archive, a different issue than CVE-2007-3375...

CVE-2007-3512

Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large LHA "Extended Header Size" value in an LZH archive, a different issue than CVE-2007-3375...

Lhaca LZH文档处理栈溢出漏洞

Lhaca是一款由日本开发的免费文档压缩解压工具。 Lhaca的文件归档器没有正确的解压.LZH文档，如果用户受骗打开了恶意压缩文档的话，就可能触发栈溢出，导致执行任意指令。 目前这个漏洞正在被名为Trojan.Lhdropper的木马积极的利用。 Lhaca 1.20 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://park8.wakwak.com/app/Lhaca/...

Stack overflow

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

CVE-2007-3375

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

CVE-2007-3375

Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper...

CVE-2007-3375

CVE-2007-3375: Lhaca File Archiver before 1.21 is affected by a stack-based buffer overflow in a crafted LZH archive, allowing user-assisted remote code execution. The vulnerability is exploited by malware such as Trojan.Lhdropper. Impact details indicate arbitrary code execution with user intera...

Authentication flaw

Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafted header in a 1 LHA or 2 RAR archive...

CVE-2007-3300

CVE-2007-3300 affects multiple F-Secure anti-virus products for Windows and Linux prior to 20070619. The vulnerability allows remote attackers to bypass scanning by exploiting a crafted header in (1) LHA or (2) RAR archives. Root cause is a flaw in header handling that enables bypass of the antiv...

[CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities

Title: CAID 35395, 35396: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities CA Vuln ID CAID: 35395, 35396 CA Advisory Date: 2007-06-05 Reported By: ZDI Impact: Remote attackers can cause a denial of service or potentially execute arbitrary code. Summary: CA Anti-Virus engine contains...

DEBIAN-CVE-2007-3123

unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service core dump via a crafted RAR file with a modified vmcodesize value, which triggers a heap-based buffer overflow...

Buffer overflow

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...

CVE-2007-2973

Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a malformed TAR archive...

CVE-2007-2974

Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code via a crafted LZH archive file, resulting from an "integer cast around."...