[SECURITY] Fedora Core 6 Update: tar-1.15.1-26.fc6

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

[SECURITY] Fedora 7 Update: tar-1.15.1-27.fc7

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

VulnCheck KEV: CVE-2007-4428

Lhaz 1.33 allows remote attackers to execute arbitrary code via unknown vectors, as actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, a different issue than CVE-2006-4116...

[SECURITY] Fedora 7 Update: lighttpd-1.4.16-1.fc7

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

Microsoft DirectX RLE压缩Targa图形文件堆溢出漏洞

BUGTRAQ ID: 24963 CVECAN ID: CVE-2006-4183 Microsoft DirectX是一个API集，用于在Windows操作系统上处理有关游戏编程的任务。 DirectX库打开RLE压缩的Targa格式图形文件的方式存在堆溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形文件控制用户系统。...

CVE-2006-4183

Heap-based buffer overflow in Microsoft DirectX SDK February 2006 and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding RLE compression that produces more data than expected when...

Symantec AntiVirus Malformed CAB and RAR Compression Remote Vulnerabilities

Description Symantec AntiVirus products that include the Symantec Decomposer are prone to multiple remote vulnerabilities related to the handling of CAB and RAR archives. These issues include a denial-of-service vulnerability and a buffer-overflow vulnerability. Successfully exploiting these issu...

[SECURITY] Fedora 7 Update: dar-2.3.4-1.fc7

DAR is a command line tool to backup a directory tree and files. DAR is able to make differential backups, split them over a set of disks or files of a given size, use compression, filter files or subtrees to be saved or not saved, directly access and restore given files. DAR is also able to hand...

[SECURITY] Fedora 7 Update: jasper-1.900.1-2.fc7

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

[SECURITY] Fedora Core 5 Update: lha-1.14i-20

LHA is an archiving and compression utility for LHarc format archives. LHA is mostly used in the DOS world, but can be used under Linux to extract DOS files from LHA archives. Install the lha package if you need to extract DOS files from LHA archives...

Dart Communications PowerTCP ZIP Compression Remote BoF Exploit

No description provided by source. !-- IE 6 / Dart Communications PowerTCP ZIP Compression Control DartZip.dll 1.8.5.3 remote buffer overflow exploit / xp sp2 it by rgod site: retrogod.altervista.org software site: www.dart.com -- html object classid='clsid:42BA826E-F8D8-4D8D-8C05-14ABCE99D4DD'...

Dart Communications PowerTCP - ZIP Compression Remote Buffer Overflow

'metasploit one, add a user 'sun' with pass 'tzu' shellcode =...

Dart Communications PowerTCP ZIP Compression Remote BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== Dart Communications PowerTCP ZIP Compression Remote BoF Exploit =============================================================== 'metasploit one, add a user 'sun' with pass 'tzu...

Dart Communications PowerTCP - ZIP Compression Remote Buffer Overflow

Dart Communications PowerTCP - ZIP Compression Remote Buffer Overflow 'metasploit one, add a user 'sun' with pass 'tzu' shellcode =...

Buffer overflow

Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used, allows user-assisted remote attackers to execute arbitrary code via a long first argument to the QuickZip function, a related issue to CVE-2007-2855...

CVE-2007-2855

CVE-2007-2855 involves a buffer overflow in the DartZipLite.dll 1.8.5.3 ActiveX control (Dart ZipLite Compression for ActiveX). The vulnerability arises from a long first argument to the QuickZip function, enabling user‑assisted remote code execution. Affected component is the DartZipLite ActiveX...

CVE-2007-2856

The CVE-2007-2856 entry documents a buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control (DartZip.dll 1.8.5.3). The flaw, triggered when Internet Explorer 6 handles a long first argument to the QuickZip function, allows user‑assisted remote code execution. This is d...

[SECURITY] Fedora Core 6 Update: libpng-1.2.10-9.fc6

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

Dart ZipLite Compression 1.8.5.3 - DartZipLite.dll ActiveX Control Buffer Overflow

Dart ZipLite Compression 1.8.5.3 - DartZipLite.dll ActiveX Control Buffer Overflow source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before...

Dart ZipLite Compression 1.8.5.3 - 'DartZipLite.dll' ActiveX Control Buffer Overflow

source: https://www.securityfocus.com/bid/24099/info The Dart ZipLite Compression ActiveX control is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue...