Sophos AntiVirus - .CHM Chunk Name Length Memory Corruption (PoC)

Sophos AntiVirus - .CHM Chunk Name Length Memory Corruption PoC Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2911.chm 12092006-sophosnamelen.chm milw0rm.com 2006-12-10...

Sophos AntiVirus - .CHM File Heap Overflow (PoC)

Sophos AntiVirus - .CHM File Heap Overflow PoC Sophos Antivirus CHM File Heap Overflow Vulnerability https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2910.chm 12092006-sophoschunkheap.chm milw0rm.com 2006-12-10...

Sophos AntiVirus - '.CHM' Chunk Name Length Memory Corruption (PoC)

Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2911.chm 12092006-sophosnamelen.chm milw0rm.com 2006-12-10...

Sophos Antivirus CHM Chunk Name Length Memory Corruption PoC

No description provided by source. Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability http://www.milw0rm.com/sploits/12092006-sophosnamelen.chm...

[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability

Sophos Antivirus CHM File Heap Overflow Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available on the vendors...

[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability

Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available...

F-PROT Antivirus ACE/CHM远程拒绝服务及溢出漏洞

F-PROT Antivirus是一款反病毒应用程序。 F-PROT Antivirus解析ACE/CHM档存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，绕过检测。 当解析特殊构建的ACE档时会造成无限循环而产生拒绝服务攻击。 当解析特殊构建的CHM档时可造成堆溢出。 F-Prot Antivirus 4.6.6 F-Prot Antivirus 3.16f 升级到最新程序F-Prot 4.6.7: http://www.f-prot.com/news/gennews/061201releaseunix467.html fprot1.py - trivial proof o...

trivial proof of concept code for F-Prot 4.6.6 .CHM heap overflow

No description provided by source. fprot2.py - trivial proof of concept code for F-Prot 4.6.6 .CHM heap overflow Copyright c 2006 Evgeny Legerov Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright...

fprot-dos.txt

Name: F-Prot Antivirus for Unix: heap overflow and Denial of Service Vendor: http://www.f-prot.com Release date: 4 Dec, 2006 URL: http://gleg.net/fprot.txt Author: Evgeny Legerov I. DESCRIPTION Two vulnerabilities in F-Prot Antivirus 4.6.6 for Unix platforms could allow a remote attacker to cause...

F-Prot antivirus buffer overflow

Buffer overflow on parsing CHM and ACE files...

CVE-2006-6293

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...

CVE-2006-6293

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...

EUVD-2006-6276

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294...

CVE-2006-5647

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk...

CVE-2006-5646

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service memory corruption via a CHM file with an LZX...

CVE-2006-5647

The CVE-2006-5647 issue affects Sophos Anti-Virus/Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and older platforms before 4.11. It is a CHM chunk header memory-corruption vulnerability triggered by malformed CHM files with a large name length; remote attackers could cause m...

CVE-2006-5647

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk...

CVE-2006-5646

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service memory corruption via a CHM file with an LZX...

[SA22591] Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities

TITLE: Sophos Anti-Virus RAR and CHM Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA22591 VERIFY ADVISORY: http://secunia.com/advisories/22591/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Sophos Anti-Virus for Windows 6.x http://secunia.com/product/12449/ Soph...

Clam Anti-Virus CHM解包器拒绝服务漏洞

Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV在处理CHM文件的解包时存在安全漏洞，远程攻击者可能利用此漏洞导致ClamAV崩溃。 在处理畸形文件时，ClamAV chmunpack.c中的代码可能试图读取无效的内存位置，导致扫描服务异常终止。 ClamAV ClamAV 0.88.4 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1196-1）以及相应补丁: DSA-1196-1：New clamav packages fix arbitrary code execution...