CVE-2013-6748

CVE-2013-6748 describes a buffer overflow in the ActiveX control qp2.dll (qp2.cab) of IBM Lotus Quickr for Domino 8.5.1, prior to 8.5.1.42-001b. Successful exploitation via a crafted HTML document enables remote arbitrary code execution. This entry is distinct from CVE-2013-6749 (which covers a s...

Cisco WAAS Mobile Server ReportReceiver CAB Processing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of CISCO WAAS Mobile Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of CAB files uploaded through ReportReceiver. By uploading a...

IBM Lotus Quickr qp2.cab ActiveX Control Integer Overflow (CVE-2013-3026)

A buffer overflow vulnerability exists in IBM Lotus Quickr for Domino. The vulnerability is due to an integer overflow within the qp2.cab ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to visit a crafted web page using Internet Explorer. Successful...

Symantec Mail Security for SMTP RAR and CAB Parsing Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

Symantec Mail Security for Exchange / Domino RAR and CAB Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

Symantec Antivirus Scan Engine RAR and CAB Parsing Multiple Vulnerabilities

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code...

Sophos Anti-Virus CAB Files Invalid typeCompress Parsing Heap Buffer Overflow - Improved Performance

A buffer overflow vulnerability has been reported in Sophos Anti-Virus. The vulnerability is due to an error in the way the application handles invalid values. A remote attacker could exploit this vulnerability by causing the affected application to process a specially crafted CAB file. Successfu...

Symantec Products CAB Files Memory Corruption Vulnerability

This host is installed with Symantec Product and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecprdtscabfilesmemcorrvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Symantec Products CAB Files Memory Corruption Vulnerability Authors: Rachana Shetty Copyright:...

Symantec Products CAB Files Memory Corruption Vulnerability

Symantec Product is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4953

The decomposer engine in Symantec Endpoint Protection SEP 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition SAVCE 10.x, and Symantec Scan Engine SSE before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allow...

Out-of-bounds

The decomposer engine in Symantec Endpoint Protection SEP 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition SAVCE 10.x, and Symantec Scan Engine SSE before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allow...

Symantec Legacy Decomposer CAB File Issues

SUMMARY Symantec's legacy Decomposer engine fails to proper handle bounds checking when parsing files from some versions of CAB archives. This could result in the probability of an application crash in the majority of cases. A successfully crafted malicious CAB file could potentially result in...

Symantec Antivirus products fail to properly handle CAB files

Overview Multiple Symantec Antivirus products fail to properly handle CAB files, which may allow a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges. Description The CAB file decomposer component that is used by multiple Symantec Antivirus products fails to properl...

CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...

DEBIAN-CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...

CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...

Buffer overflow

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...

CVE-2010-4666

CVE-2010-4666 : A buffer overflow in the libarchive library (3.0 pre-release) allows remote attackers to crash the application or cause other impact via a crafted CAB file, due to improper handling of Huffman code data in LZX data. Documented across multiple sources: Red Hat RHSA-2011:1507-01 and...

CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...

CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data...