Ubuntu 8.10 / 9.04 / 9.10 : clamav vulnerabilities (USN-926-1)

It was discovered that ClamAV did not properly verify its input when processing CAB files. A remote attacker could send a specially crafted CAB file to evade malware detection. CVE-2010-0098 It was discovered that ClamAV did not properly verify its input when processing CAB files. A remote attack...

USN-926-1: ClamAV vulnerabilities

It was discovered that ClamAV did not properly verify its input when processing CAB files. A remote attacker could send a specially crafted CAB file to evade malware detection. CVE-2010-0098 It was discovered that ClamAV did not properly verify its input when processing CAB files. A remote attack...

Memory corruption

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

DEBIAN-CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

DEBIAN-CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

Authentication flaw

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-1311

The qtmdecompress function in libclamav/mspack.c in ClamAV before 0.96 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted CAB archive that uses the Quantum aka .Q compression format. NOTE: some of these details are obtained from third party...

CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

$Id: awingsoftwinds3dsceneurl.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CA Antivirus Engine CAB Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'CA...

Kingsoft Internet Security 9 Denial of Services

Exploit for unknown platform in category dos / poc =============================================== Kingsoft Internet Security 9 Denial of Services =============================================== Title: Kingsoft Internet Security 9 Denial of Services CVE-ID: OSVDB-ID: Author: Francis Provencher...

Kingsoft Internet Security 9 - Denial of Service

Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report Timeline 3 Technical details 4 The Cod...

Sophos Anti-Virus CAB File Invalid Folder Count Heap Overflow (CVE-2006-0994)

Sophos Anti-Virus AV is a product that provides virus scanning functionality for desktop and server systems. It can scan files on the local system or files downloaded from the network for known viruses, Trojans, and other malicious programs. The AV product is capable of interpreting numerous...

CVE-2008-7144

WinRAR prior to 3.71 is affected by multiple unspecified vulnerabilities triggered by crafted archive formats (ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, ZIP). The exact impact, vectors, and fixes are not detailed in the provided documents.

Design/Logic Flaw

Sophos Anti-Virus for Windows before 7.6.3, Anti-Virus for Windows NT/9x before 4.7.18, Anti-Virus for OS X before 4.9.18, Anti-Virus for Linux before 6.4.5, Anti-Virus for UNIX before 7.0.5, Anti-Virus for Unix and Netware before 4.37.0, Sophos EM Library, and Sophos small business solutions, wh...