Microsoft Windows MFC Document Title Updating Buffer Overflow (MS10-074)

The Microsoft Foundation Class Library MFC is a library that wraps portions of the Windows API in C++ classes, including functionality that enables them to use a default application framework. A stack buffer overflow vulnerability has been reported in Microsoft Windows MFC library mfc42.dll. The...

Данные из взломанного процессинга Хронопэй

Ровно неделя прошла с момента опубликования заявления группы хакеров о взломе платежной системы «Chronopay», краже массива кредитных карт http://chronoplay.livejournal.com/586.html и личных данных миллионов россиян. Поскольку официальные лица компании продолжают делать вид, что ничего не произошл...

RHEL 4 / 5 : perl-Archive-Tar (RHSA-2010:0505)

An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 4 / 5 : perl-Archive-Tar (CESA-2010:0505)

An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

perl security update

CentOS Errata and Security Advisory CESA-2010:0505 An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability...

Panda AntiVirus Zoo Denial of Service Vulnerability

Panda Software Antivirus/Internet Security before 20070402 allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced...

Perl Archive::Tar Module Remote Directory Traversal Vulnerability

Perl Archive::Tar module is prone to a directory-traversal vulnerability because it fails to validate user-supplied data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Perl Archive::Tar Module Remote Directory Traversal Vulnerability

Perl Archive::Tar module is prone to a directory-traversal vulnerability because it fails to validate user-supplied data. A successful attack can allow the attacker to overwrite files on a computer in the context of the user running the affected application. Successful exploits may aid in further...

RedHat Update for perl-Archive-Tar RHSA-2010:0505-01

Check for the Version of perl-Archive-Tar OpenVAS Vulnerability Test RedHat Update for perl-Archive-Tar RHSA-2010:0505-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

RedHat Update for perl-Archive-Tar RHSA-2010:0505-01

Check for the Version of perl-Archive-Tar OpenVAS Vulnerability Test RedHat Update for perl-Archive-Tar RHSA-2010:0505-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Moderate: Red Hat Security Advisory: perl-Archive-Tar security update

An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

perl-Archive-Tar directory traversal flaws

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

perl-Archive-Tar security update

1.39.1-1.el5.1 - cleaning spec and nvr - Related: rhbz595733 1.40-1.el5.1 - update to real version 1.3901, but for rpm updates, it will be 1.40 - Resolves: rhbz595733 1.40-1 - update to 1.40 - Resolves: rhbz595733...

Mandriva Update for fastjar MDVSA-2010:122 (fastjar)

Check for the Version of fastjar OpenVAS Vulnerability Test Mandriva Update for fastjar MDVSA-2010:122 fastjar Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

TweakFS Zip Utility for FSX filename buffer overflow

Added: 06/24/2010 CVE: CVE-2010-1458 BID: 39565 OSVDB: 63899 Background The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities. Problem A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long,...

TweakFS Zip Utility for FSX filename buffer overflow

Added: 06/24/2010 CVE: CVE-2010-1458 BID: 39565 OSVDB: 63899 Background The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities. Problem A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long,...

TweakFS Zip Utility for FSX filename buffer overflow

Added: 06/24/2010 CVE: CVE-2010-1458 BID: 39565 OSVDB: 63899 Background The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities. Problem A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long,...

TweakFS Zip Utility for FSX filename buffer overflow

Added: 06/24/2010 CVE: CVE-2010-1458 BID: 39565 OSVDB: 63899 Background The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities. Problem A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long,...

Mandriva Linux Security Advisory : fastjar (MDVSA-2010:122)

A vulnerability has been discovered and corrected in fastjar : Directory traversal vulnerability in the extractjar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in a non-initial pathname component in a filename within a .jar...

Explzh buffer overflow vulnerability

Overview Explzh contains a buffer overflow vulnerability. Explzh, a file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability when processing a LHA file header. Note that versions of Explzh that contain "Arcext.dll" version 2.16...