4 matches found
Libmobi Information Disclosure Vulnerability (CNVD-2018-10875)
Libmobi is a C-based language for processing Kindle MOBI format e-book document library . A security vulnerability exists in the 'bufferfill64' function of the compression.c file in Libmobi version 0.3. A remote attacker can exploit this vulnerability to disclose information heap-based buffer...
Heap overflow
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted FLC compression file...
VulnCheck KEV: CVE-2007-4428
Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116...
OPeNDAP BES压缩文件远程命令执行漏洞
OPeNDAP是一款帮助研究者在不同格式中交换数据集的应用软件。 OPeNDAP服务程序的BES守护进程存在安全问题,远程攻击者可以利用漏洞以应用程序进程权限执行任意代码。 攻击者可以发送特殊构建的压缩文件给受影响的服务器程序,导致BES守护程序在过滤压缩文件中的数据时出现问题而执行任意代码。 OPeNDAP Hyrax 1.2 OPeNDAP BES 3.4.2 + OPeNDAP Hyrax 1.2 升级程序: OPeNDAP BES 3.4.2 OPeNDAP bes-3.5.0.tar.gz...