libarchive -- Infinite loop in corrupt archives handling in libarchive

Problem Description: If the end of an archive is reached while attempting to "skip" past a region of an archive, libarchive will enter an infinite loop wherein it repeatedly attempts and fails to read further data. Impact: An attacker able to cause a system to extract via "tar -x" or another...

[SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1204-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 2nd, 2006 http://www.debian.org/security/faq -...

Clam Anti-Virus CHM解包器拒绝服务漏洞

Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在处理CHM文件的解包时存在安全漏洞，远程攻击者可能利用此漏洞导致ClamAV崩溃。 在处理畸形文件时，ClamAV chmunpack.c中的代码可能试图读取无效的内存位置，导致扫描服务异常终止。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code execution...

Debian DSA-959-1 : unalz - buffer overflow

Ulf Harnhammar from the Debian Security Audit Project discovered that unalz, a decompressor for ALZ archives, performs insufficient bounds checking when parsing file names. This can lead to arbitrary code execution if an attacker provides a crafted ALZ archive. %NASLMINLEVEL 70300 C Tenable Netwo...

Debian DSA-1170-1 : gcc-3.4 - missing sanity check

Jurgen Weigert discovered that upon unpacking JAR archives fastjar from the GNU Compiler Collection does not check the path for included files and allows to create or overwrite files in upper directories. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

Alvila Avast! antivirus buffer overflow

Buffer overflow on LHA archives parsing...

[SECURITY] [DSA 1170-1] New fastjar packages fix directory traversal

-------------------------------------------------------------------------- Debian Security Advisory DSA 1170-1 [email protected] http://www.debian.org/security/ Martin Schulze September 6th, 2006 http://www.debian.org/security/faq -...

DSA-1170 gcc-3.4 - missing sanity check

Bulletin has no description...

Compression Plus library buffer overflow

Buffer overflow on Zoo archives parsing...

BlogCMS.txt

Blog:Cms = 4.1.0 Remote Inclusion File Bug Found by Drago84 ToxiC CreW Site Vendor :http://blogcms.com/ Page affetc: index.php media.php archive.php archives.php blog.php The Problem is: include$DIRPLUGINS."related/nusoap.php"; Expl:...

OZJournal15.txt

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

LHAZ archiver buffer overflow

Buffer overflow on oversized filename during JZH archives parsing...

CVE-2005-2529

Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1133-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 1st, 2006 http://www.debian.org/security/faq -...

CVE-2006-3901

Multiple stack-based buffer overflows in Tumbleweed Email Firewall EMF allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a 1 file or 2 directory with a long LHA extended header, 3 an LHA archive in which the "temporary pathname" field for...

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

DynaZip buffer overflow

Buffer overflows in DZIP32.DLL/DZIPS32.DLL libraries on ZIP archives processing...

[SECURITY] [DSA 1110-1] New samba packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1110-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 16th, 2006 http://www.debian.org/security/faq -...

WinRAR 3.60 Beta 6 (French) - SFX Path Local Stack Overflow

WinRAR 3.60 Beta 6 French - SFX Path Local Stack Overflow """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts XP SP2 French...