575 matches found
CVE-2019-16511
An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file even with a ../ sequence is...
Meet the BlueHat Content Advisory Board
We couldn’t do BlueHat without the Content Advisory Board, the brain trust reviewing submissions to the CFP. Representing both Microsoft and other parts of security community, the CAB applies their industry and speaker experience to create the BlueHat agenda that’s the right mix of topics and...
EulerOS Virtualization for ARM 64 3.0.2.0 : libarchive (EulerOS-SA-2019-1954)
According to the version of the libarchive package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The archivestringappend function in archivestring.c in libarchive before 3.2.0 allows remote attackers to cause a deni...
EulerOS 2.0 SP5 : libarchive (EulerOS-SA-2019-1882)
According to the version of the libarchive package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The archivestringappend function in archivestring.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a...
The vulnerability of the File Signature Security function in the Windows operating system allows a hacker to circumvent existing security restrictions and introduce malicious code into a CAB file without canceling the file’s signature.
The vulnerability of the File Signature Security function in the Windows operating system is related to errors in checking the signatures of CAB files. Exploiting this vulnerability allows a hacker to bypass existing security restrictions and inject malicious code into CAB files without...
CVE-2019-1163
A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature. To exploit the vulnerability, an attacker could modify a signed CAB file...
CVE-2019-1163
A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature. To exploit the vulnerability, an attacker could modify a signed CAB file...
Security feature bypass
A security feature bypass exists when Windows incorrectly validates CAB file signatures, aka 'Windows File Signature Security Feature Bypass Vulnerability'...
CVE-2019-1163
Technical details (affected products, components, versions, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and CVE records.
Windows File Signature Security Feature Bypass Vulnerability
A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature. To exploit the vulnerability, an attacker could modify a signed CAB file...
Denial Of Service (Dos)
libmspack is vulnerable to denial of service. The CAB block input buffer is one byte too small for the maximal Quantum block, which would allow an attacker to crash the application via an out-of-bounds write using a malicious CAB block input...
Moderate: Red Hat Security Advisory: libmspack security update
An update for libmspack is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
libmspack: Out-of-bounds write in mspack/cab.h
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...
EulerOS Virtualization 3.0.1.0 : libarchive (EulerOS-SA-2019-1470)
According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libarchive. A specially crafted MTREE file could cause a small out-of-bounds read, potentially...
The vulnerability of the Libmspack library and the CAB-file decompression utility SabExtract, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Libmspack library mspack/cab.h and the CAB-file decompression utilities provided by SabExtract are related to memory buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...
SUSE SLES11 Security Update : libmspack (SUSE-SU-2019:13992-1)
This update for libmspack fixes the following issues : Security issues fixed : CVE-2018-18584: The CAB block input buffer was one byte too small for the maximal Quantum block, leading to an out-of-bounds write. bsc1113038 CVE-2018-18585: chmdreadheaders accepted a filename that has '\0' as its...
SUSE SLED15 / SLES15 Security Update : libmspack (SUSE-SU-2019:0748-1)
This update for libmspack fixes the following issues : Security issues fixed : CVE-2018-18584: The CAB block input buffer was one byte too small for the maximal Quantum block, leading to an out-of-bounds write. bsc1113038 CVE-2018-18585: chmdreadheaders accepted a filename that has '\0' as its...
PHP Scripts Mall Cab Booking Script Path Traversal Vulnerability
PHP Scripts Mall Cab Booking Script is a cab booking website system by PHP Scripts Mall India. A path traversal vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0.3, which can be exploited by an attacker to obtain a list of parent directories for jpg or png files...