CVE-2007-1671

avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

cpio large filesize buffer overflow

Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...

CVE-2007-2058

CVE-2007-2058 = Directory traversal in Acubix PicoZip 4.02. Processing archives (GZ, TAR, RAR, JAR, ZIP) allows a user-assisted remote attacker to overwrite arbitrary files via a .. sequence in file paths within the archive. Based on NVD metrics, impact is partial confidentiality, integrity, and ...

CVE-2007-2058

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in the file path in an 1 GZ, 2 TAR, 3 RAR, 4 JAR, or 5 ZIP archive...

CVE-2007-2030

lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...

CVE-2007-1965

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

[Full-disclosure] ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability

ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow http://www.zerodayinitiative.com/advisories/ZDI-07-013.html April 5, 2007 -- CVE ID: CVE-2007-0445 -- Affected Vendor: Kaspersky -- Affected Products: Anti-Virus 6.0 Internet Security 6.0 Anti-Virus for Workstation File Serv...

Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with affected installations of the Kaspersky Anti-Virus Engine. User interaction is not required to exploit this vulnerability. The specific flaw exists in the engine's handling of the ARJ archive format. The Kaspersk...

Unfixed XSS vulnerability at www.disability-archive.leeds.ac.uk

Security researcher cyber, has submitted on 31/03/2007 a cross-site-scripting XSS vulnerability affecting www.disability-archive.leeds.ac.uk, which at the time of submission ranked 8974 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2007...

CVE-2007-1777

Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...

Integer overflow

Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...

CVE-2007-1777

Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...

CVE-2007-1777

Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...

MOPB-35-2007:PHP 4 zip_entry_read() Integer Overflow Vulnerability

Summary The zipreadentry function that is used to read the content of a file stored inside a .ZIP archive is vulnerable to an integer overflow in memory allocation that leads to an exploitable bufferoverflow. Affected versions Affected are PHP 4 4.4.5 Detailed information The zipreadentry functio...

Sql injection

SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2007-1187

WebAPP prior to 0.9.9.5 is affected by an information disclosure vulnerability: remote authenticated users without admin privileges can access sensitive information via the Forum Archive feature and Recent Searches. The issue is documented in CVE-2007-1187 with a base impact on confidentiality (P...

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation !/bin/sh Nortel SSL VPN Linux Client race condition Jon Hart The Linux client that is utilized by versions priot to 6.05 of the Nortel SSL VPN appliance suffers from a number of problems that, in combination, allow an unprivileged loc...