9 matches found
EUVD-2006-4542
Malware in sbrugna...
Compression Plus ZOO文档处理栈溢出漏洞
Compression Plus库用于压缩/解压各种流行的文档格式。 Compression Plus库的代码在处理ZOO文档时存在漏洞，成功利用这个漏洞的攻击者可能以当前执行用户权限执行任意指令。 Compression Plus库中ReadFile函数的nNumberOfBytesToRead参数是由用户提供的，但没有执行任何长度检查。对ReadFile最多可传送7FFFh的值，但指定39Ch字节就可以覆盖栈中的函数返回指针，如下： .text:1040A71B movsx eax, word ptr ebp+ZooHeader+24h .text:1040A71F push eax...
CVE-2006-4554
Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including 1 Tumbleweed EMF, 2 VCOM/Ontrack PowerDesk Pro, 3 Canyon Drag and Zip, 4 Canyon Power File, and 5 Canyon Power File Gold, allow...
CVE-2006-4554
CVE-2006-4554 is a stack-based buffer overflow in BeCubed Compression Plus (ZOO-processing exports ReadFile) that allows arbitrary code execution via an inconsistent size parameter in a ZOO file header. Affected products include BeCubed Compression Plus prior to 5.0.1.28, and related suites such ...
CVE-2006-4554: Undefined Security Weakness
Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including 1 Tumbleweed EMF, 2 VCOM/Ontrack PowerDesk Pro, 3 Canyon Drag and Zip, 4 Canyon Power File, and 5 Canyon Power File Gold, allow...
Compression Plus CP5DLL32.DLL ZOO Archive Header Processing Overflow RCE
The version of the Compression Plus toolkit installed on the remote Windows host contains a DLL file that is affected by a stack-based overflow condition when processing specially crafted ZOO files. A remote attacker can exploit this issue, via an inconsistent size parameter in a ZOO file header,...
PT-2006-5347 · Canyon +3 · Canyon Power File Gold +5
Name of the Vulnerable Software and Affected Versions: BeCubed Compression Plus versions prior to 5.0.1.28 Tumbleweed EMF versions prior to 5.0.1.28 VCOM/Ontrack PowerDesk Pro versions prior to 5.0.1.28 Canyon Drag and Zip versions prior to 5.0.1.28 Canyon Power File versions prior to 5.0.1.28...
KLA10125 ACE vulnerability in Compression Plus
A buffer overflow was found in the Compression Plus library. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZOO file. Original advisories BeCubed changelog Exploitation Public exploits exist for th...
