CVE-2007-4546

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrit...

Design/Logic Flaw

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrit...

CVE-2007-4545

Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. dot dot in a filename within a 1 ZIP or 2 RAR archive...

Directory traversal

Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. dot dot in a filename within a 1 ZIP or 2 RAR archive...

CVE-2007-4547

Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information memory contents by reading the extracted files. NOTE:...

CVE-2007-4546

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrit...

CVE-2007-4547

Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information memory contents by reading the extracted files. NOTE:...

CVE-2007-4547

Unreal Commander 0.92 build 565 and 573 is vulnerable to a heap-memory leakage issue during extraction from archives with malformed size info in the file header. The affected component writes portions of heap memory into local files, potentially enabling a user with sufficient privileges or acces...

CVE-2007-4546

Unreal Commander 0.92 build 565 and 573 is affected. The software extracts ZIP entries using Local File Header names instead of Central Directory filenames, enabling an attacker to cause a user to overwrite or create local files via a crafted archive. The description notes the mismatch between Ce...

CVE-2007-4545

CVE-2007-4545 describes multiple directory traversal vulnerabilities in Unreal Commander 0.92 builds 565 and 573. The flaw allows user-assisted remote attackers to create or overwrite arbitrary files via a .. path segment in a filename inside a (1) ZIP or (2) RAR archive. The connected documents ...

X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilities

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : X-Diesel Unreal Commander v0.92 build 573 multiple vulnerabilities Class : Local/Remote multiple directory traversal Input Validation Error Threat level : HIGH Discovered : 2007-08-09 Published : 2007-08-23 Credit : Gynvael Coldwind...

Unreal Commander畸形压缩文档多个远程漏洞

BUGTRAQ ID: 25419 Unreal Commander是一款免费的Windows平台文件管理器。 Unreal Commander在解压文件时存在多个安全漏洞，攻击者可能通过诱使用户处理恶意文件控制用户系统。 如果用户使用Unreal Commander解压了文件名包含有类似于以下目录遍历序列的ZIP或RAR文档的话： Something/../../../../../../Program Files/Something/ws232.dll 就会导致在指定目录中创建ws232.dll文件。 ZIP文档中包含有两处写入文件名的位置：Local文件头和Central...

Unreal Commander 0.92 - ZIP RAR Archive Handling Traversal Arbitrary File Overwrite

Unreal Commander 0.92 - ZIP RAR Archive Handling Traversal Arbitrary File Overwrite source: https://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal...

Unreal Commander 0.92 - ZIP / RAR Archive Handling Traversal Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/25419/info Unreal Commander is prone to multiple remote vulnerabilities when handling malformed ZIP and RAR archives. These vulnerabilities include a directory-traversal vulnerability, an information-disclosure vulnerability, and a filename-spoofing...

Crlf injection

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

CVE-2007-4464

CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...

CVE-2007-4463

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

Buffer overflow

The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...

CVE-2007-4464

The CVE-2007-4464 entry describes a CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander. The issue affects the plugin’s handling of PE exports: an attacker could inject CRLF sequences into the IMAGE_EXPORT_DIRECTORY data, enabling spoofing of information shown in the Ima...

CVE-2007-4463

The CVE-2007-4463 entry concerns the Fileinfo 2.0.9 plugin for Total Commander. Affected component: PE file handling within the plugin, specifically invalid RVA address function pointers in IMAGE_THUNK_DATA (OriginalFirstThunk/FirstThunk) and IMAGE_EXPORT_DIRECTORY’s AddressOfNames. Root cause: m...