CVE-2005-3501

CVE-2005-3501 affects ClamAV before 0.87.1 via the cabd_find path in libmspack (cab d.c) where a crafted CAB file causes cabd_find to be called with a zero length, leading to a denial of service (infinite loop). The vulnerability is tied to ClamAV's libmspack CAB handling; upgrade to 0.87.1 or la...

[SA17434] Clam AntiVirus TNEF/CAB/FSG File Handling Vulnerabilities

TITLE: Clam AntiVirus TNEF/CAB/FSG File Handling Vulnerabilities SECUNIA ADVISORY ID: SA17434 VERIFY ADVISORY: http://secunia.com/advisories/17434/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTIO...

CVE-2005-3142

Heap-based buffer overflow in Kaspersky Antivirus KAV 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the header...

Kaspersky Antivirus buffer overflow

Heap based buffer overflow on CAB files parsing...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

DEBIAN-CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

CVE-2005-1923

The ENSUREBITS macro in mszipd.c for Clam AntiVirus ClamAV 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service CPU consumption by infinite loop via a cabinet CAB file with the cffileFolderOffset field set to 0xff, which causes a zero-length read...

Multiple ClamAV antivirus DoS vulnerabilities

Descriptors leak on MS-Expand and CAB files...

CVE-2005-0668

Unknown vulnerability in HTTP Anti Virus Proxy HAVP before 0.51 prevents viruses from being properly detected in certain files such as 1 .CAB or 2 .ZIP files...

CVE-2005-0668

Unknown vulnerability in HTTP Anti Virus Proxy HAVP before 0.51 prevents viruses from being properly detected in certain files such as 1 .CAB or 2 .ZIP files...

[Full-Disclosure] WinHKI - CAB File Directory Transversal

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: CAB File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introduction 2...

CVE-2004-2643

Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive...

ESET Anti-Virus Bypass CAB Scanning

Binary data 5009.prm...

Заткнута дырка в IE (CAB AtciveX)

Элемент управления Active X позволял загрузить CAB-файлы подписанные Microsoft в любое место на диске без запроса пользователя, что позволяло испортить имеющиеся системные файлы...

unsigned.cab.exploit.txt

Vulnerability details and example exploit for Microsoft Active Setup control's unsigned CAB file execution vulnerability. Introduction Microsoft's Active Setup Control asctrls.ocx shipped with Internet Explorer 4 and above has a vulnerability in it as discovered by Juan Carlos Garcia Cuartango ,...