1869 matches found
Unchecked Buffer in Decompression Functions(Q329048)
Two vulnerabilities exist in the Compressed Folders function: An unchecked buffer exists in the programs that handles the decompressing of files from a zipped file. A security vulnerability results because attempts to open a file with a specially malformed filename contained in a zipped file coul...
Microsoft Windows Unchecked Buffer in Decompression Functions (Q329048)
Two vulnerabilities exist in the Compressed Folders function: An unchecked buffer exists in the programs that handles the decompressing of files from a zipped file. A security vulnerability results because attempts to open a file with a specially malformed filename contained in a zipped file coul...
CVE-2005-3194
Multiple buffer overflows in ALZip 6.12 Korean, 6.1 International, and 5.52 English allow remote attackers to execute arbitrary code via a long filename in a compressed 1 ALZ, 2 ARJ, 3 ZIP, 4 UUE, or 5 XXE archive...
CVE-2005-3194
Multiple buffer overflows in ALZip 6.12 Korean, 6.1 International, and 5.52 English allow remote attackers to execute arbitrary code via a long filename in a compressed 1 ALZ, 2 ARJ, 3 ZIP, 4 UUE, or 5 XXE archive...
CVE-2005-3194
CVE-2005-3194 affects ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English). The vulnerability is described as multiple buffer overflows that allow remote attackers to execute arbitrary code via a long filename inside compressed archives (ALZ, ARJ, ZIP, UUE, XXE). Connected sources reitera...
Mandrake Linux Security Advisory : zlib (MDKSA-2005:124)
A previous zlib update MDKSA-2005:112; CVE-2005-2096 fixed an overflow flaw in the zlib program. While that update did indeed fix the reported overflow issue, Markus Oberhumber discovered additional ways that a specially crafted compressed stream could trigger an overflow. An attacker could creat...
[ GLSA 200509-13 ] Clam AntiVirus: Multiple vulnerabilities
Gentoo Linux Security Advisory GLSA 200509-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
DC++ dirrect connect protocol client DoS
During transfer of bzip2 compressed filelist decompressed list size is not controlled leading to possibility of resource exhaustion...
HAURItraverse.txt
====================================================================== Secunia Research 19/08/2005 - HAURI Anti-Virus Compressed Archive Directory Traversal - ====================================================================== Table of Contents Affected...
CVE-2005-2458
inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 allows remote attackers to cause a denial of service kernel crash via a compressed file with "improper tables"...
CVE-2005-2457
The driver for compressed ISO file systems zisofs in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service kernel crash via a crafted compressed ISO file system...
CVE-2005-2459
The huftbuild function in inflate.c in the zlib routines in the Linux kernel before 2.6.12.5 returns the wrong value, which allows remote attackers to cause a denial of service kernel crash via a certain compressed file that leads to a null pointer dereference, a different vulnerability than...
CVE-2005-2457
The driver for compressed ISO file systems zisofs in the Linux kernel before 2.6.12.5 allows local users and remote attackers to cause a denial of service kernel crash via a crafted compressed ISO file system...
CVE-2004-2442
CVE-2004-2442 covers a multiple interpretation error in several F-Secure Anti-Virus products (including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, and Anti-Virus for Linux/Gateways 4.61 and earlier). The issue allows remote attackers to bypass an...
FreeBSD : clamav -- multiple remote buffer overflows (1db7ecf5-fd24-11d9-b4d6-0007e900f87b)
An Secunia Advisory reports : Neel Mehta and Alex Wheeler have reported some vulnerabilities in Clam AntiVirus, which can be exploited by malicious people to cause a DoS Denial of Service or compromise a vulnerable system. - Two integer overflow errors in 'libclamav/tnef.c' when processing TNEF...
FreeBSD : xloadimage -- arbitrary command execution when handling compressed files (310d0087-0fde-4929-a41f-96f17c5adffe)
Tavis Ormandy discovered that xli and xloadimage attempt to decompress images by piping them through gunzip or similar decompression tools. Unfortunately, the unsanitized file name is included as part of the command. This is dangerous, as in some situations, such as mailcap processing, an attacke...
zlib DoS
zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...
CVE-2005-2096
zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...
CVE-2005-2096
zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file...