71 matches found
EUVD-2013-0181
Malware in sbrugna...
EUVD-2006-2520
Malware in sbrugna...
CVE-2013-0138
BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...
BitZipper Installed
BitZipper, a data compression tool, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66554; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31"; scriptnameenglish:"BitZipper Installed";...
BitZipper 2013 < 2013 Update 1 Memory Corruption Vulnerability
The version of BitZipper is 2013 prior to update 1 2013.13.4.16. As such, it is affected by a memory corruption vulnerability triggered when handling a crafted ZIP file. An attacker could exploit this issue by tricking a user into opening a specially crafted ZIP file, resulting in arbitrary code...
CVE-2013-0138
BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...
CVE-2013-0138
BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...
Memory corruption
BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...
CVE-2013-0138
CVE-2013-0138 affects BitZipper 2013 prior to Update 1 (version 2013.13.4.16). A crafted ZIP archive can trigger a memory corruption vulnerability, allowing remote code execution or a denial of service. Remediation is to update to BitZipper 2013 Update 1 or later. CERT/CC notes mitigation options...
CVE-2013-0138
BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...
BitZipper 2013 memory-corruption vulnerability
Overview BitZipper 2013 contains a memory-corruption vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BitZipper 2013 contains a memory-corruption vulnerability, which may allow a remote unauthenticated attacker to execu...
Secunia Research: BitZipper unacev2.dll Buffer Overflow Vulnerability
====================================================================== Secunia Research 17/07/2006 - BitZipper unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
BitZipper Archive Extraction Directory traversal
BitZipper Archive Extraction Directory traversal BitZipper is an advanced data compression tool for Windows that enables you to unzip 18 different compression and encoding formats with superior ease-of-use. Create 8 different types of compressed files http://www.bitzipper.com Credit: The...
CVE-2006-2520
Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...
Directory traversal
Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...
CVE-2006-2520
Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...
CVE-2006-2520
CVE-2006-2520 affects BitZipper (versions up to and including 4.1.2 SR-1). The flaw is a directory traversal in archive handling: a filename within a stored archive (RAR, TAR, ZIP, GZ, JAR) can contain a .. sequence, enabling an attacker to create files in arbitrary directories on the host. This ...
CVE-2005-3220
Multiple interpretation error in unspecified versions of Norman Virus Control Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and...
CVE-2005-3221
Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, eve...
CVE-2005-3224
Multiple interpretation error in unspecified versions of AntiVir Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even...