Microsoft Excel - FEATHEADER Record (MS09-067)

Microsoft Excel - FEATHEADER Record MS09-067 MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwi...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode = b"\xDB\xDF\xD9\x74\x24\xF4\x58\x2B\xC9\xB1\x33\xBA"...

Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

Microsoft Word - Record Parsing Buffer Overflow MS09-027 MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcod...

Kaspersky Antivirus <= 6.0.1.411 UPX DoS Vulnerability

Kaspersky AntiVirus Engine 6.0.1.411 for Windows allows remote attackers to cause a denial of service CPU consumption via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be...

Kaspersky Antivirus UPX Denial of Service vulnerability

Kaspersky AntiVirus Engine 6.0.1.411 for Windows allows remote attackers to cause a denial of service CPU consumption via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression. OpenVAS Vulnerability Test Kaspersky Antivirus UPX Denial of Servic...

CVE-2008-6662

AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption...

Memory corruption

AVG Anti-Virus for Linux 7.5.51, and possibly earlier, allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via a malformed UPX compressed file, which triggers memory corruption...

FreeBSD Ports: p5-Archive-Zip

The remote host is missing an update to the system as announced in the referenced advisory. VID a5742055-300a-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Design/Logic Flaw

The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service engine crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2008-3373

The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service engine crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2008-3373

The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service engine crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2008-3243

Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remote attackers to cause a denial of service via 1 a crafted UPX-compressed file, which triggers an engine crash; 2 a crafted Microsoft Office file, which triggers an infinite loop; ...

CVE-2008-1833

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary...

CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

Design/Logic Flaw

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2972

The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service application crash via a crafted UPX compressed file, which triggers a divide-by-zero error...

CVE-2007-2972

CVE-2007-2972 affects Avira AntiVir Antivirus (pre-7.04.00.24) where the file parsing engine mishandles UPX-compressed files, triggering a divide-by-zero and causing an application crash (DoS). The vulnerability is described as a denial-of-service via crafted UPX inputs. The available connected d...

CVE-2007-1281

Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service CPU consumption via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression...

CVE-2007-1281

The CVE-2007-1281 issue affects Kaspersky Anti-Virus Engine versions for Windows (6.0.1.411) and Linux (5.5-10). A crafted UPX-compressed file with a negative offset can trigger an infinite loop during decompression, allowing remote attackers to cause a denial of service via CPU consumption. The ...