10471 matches found
open-vm-tools: vm-support's diagnostics archive created with world-readable permissions
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive...
cpio: heap-based buffer overflow flaw in list_file()
A heap-based buffer overflow flaw was found in cpio's listfile function. An attacker could provide a specially crafted archive that, when processed by cpio, would crash cpio, or potentially lead to arbitrary code execution...
binutils: out of bounds memory write
A heap-based buffer overflow flaw was found in the way certain binutils utilities processed archive files. If a user were tricked into processing a specially crafted archive file, it could cause the utility used to process that archive to crash or, potentially, execute arbitrary code with the...
Updated iceape packages fix security vulnerabilities
Updated iceape packages fix security issues: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code vi...
WinRAR SFX 'Text and Icon' Function Remote Code Execution Vulnerability
WinRAR is a suite of compression and decompression software, of which SFX is a component that carries its own decompression program. A remote code execution vulnerability exists in WinRAR SFX. An attacker could use this vulnerability to execute arbitrary code in an affected application, which cou...
web.archive.org XSS vulnerability
Vulnerable URL: https://web.archive.org/web/20151108155407/http://burgerking.ru/search?txtSearch=%22%3E%3Cscript%3Ealert%2FXSSPOSED%2F%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
web.archive.org XSS vulnerability
Vulnerable URL: https://web.archive.org/save/http://burgerking.ru/search?txtSearch="...
ALPINE-CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
AZL-6939 CVE-2015-7697 affecting package unzip for versions less than 6.0-19
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
AZL-35337 CVE-2015-7697 affecting package unzip for versions less than 6.0-20
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
DEBIAN-CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
ALPINE-CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
AZL-6938 CVE-2015-7696 affecting package unzip for versions less than 6.0-19
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
Design/Logic Flaw
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
CVE-2015-7696
Info-ZIP UnZip 6.0 is vulnerable to a heap-based buffer over-read that can crash the application or possibly allow arbitrary code execution when processing crafted password-protected ZIP archives, possibly related to an Extra-Field size value. This CVE (CVE-2015-7696) is widely reported across di...