Microsoft Windows - Compressed Zipped Folders (MS04-034)

Microsoft Windows - Compressed Zipped Folders MS04-034 / Microsoft Windows Vulnerability in Compressed zipped Folders MS04-034 Tested under Windows XP SP0 Spanish/English Original Advisory: http://www.eeye.com/html/research/advisories/AD20041012A.html Exploit Date: 21/10/2004 Tarako -...

Microsoft Windows Compressed (zipped) Folder Buffer Overflow Vulnerability

Description Microsoft Windows contains a buffer overflow in the Compressed zipped Folders feature. A maliciously crafted compressed file could overrun an internal buffer causing arbitrary code to be executed in the security context of the current user. Technologies Affected Avaya DefinityOne Medi...

CVE-2002-1139

The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target...

CVE-2004-0683

Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service CPU consumption via a compressed archive that contains a large number of directories...

Buffer overflow and directory traversal in Microsoft Windows Compressed Folders feature

Buffer overflow and directory traversal while extracting file from .zip archive...

Security Bulletin MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048)

---------------------------------------------------------------------- Title: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution Q329048 Date: 02 October 2002 Software: Microsoft Windows 98 with Plus! Pack, Windows Me, or Windows XP Impact: Two vulnerabilities, the most...

Multiple vendor implementations of file scanning utilities vulnerable to DoS via compressed file archive

Overview Several file scanning utilities, including some virus scanners, may fail and crash when scanning compressed file archives. Description Many file scanners will decompress compressed file archives in memory so their contents can be scanned. However, some of these scanners do not check if...

CVE-2002-0163

Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

CVE-2001-0152

The CVE-2001-0152 issue affects Plus! for Windows 98/Me where the password protection option for Compressed Folders writes password information to a file, enabling local users to recover passwords and read the compressed folders. Connected data show that the related log file dynazip.log can conta...

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders...

Дырка в compressed folders Windows 98/ME (recoverable passwords)

Пароли могут быть восстановлены...

CVE-2000-0887

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer ZXFR request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."...

ISC BIND < 8.2.2-P7 Compressed ZXFR Name Service Query DoS

The remote BIND server, according to its version number, is vulnerable to the 'ZXFR bug' that could allow an attacker to crash this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10549; scriptversion"1.22"; scriptcvsdate"Date: 2018/06/27 18:42:25";...

ISC BIND 8.2.2-P5 - Denial of Service

ISC BIND 8.2.2-P5 - Denial of Service source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in...

ISC BIND 8.2.2-P5 - Denial of Service

source: https://www.securityfocus.com/bid/1923/info BIND is the Berkeley Internet Name Daemon, a free Name Resolution software package maintained by the Internet Software Consortium. A Denial of Service exists in current implementations. The problem occurs in the Compressed Zone Transfer ZXFR...