CVE-2005-1719: Undefined Security Weakness

Unknown vulnerability in ALWIL avast! antivirus 4 4.6.6230 and earlier, when running on Windows NT 4.0, does not properly detect certain viruses...

CVE-2004-2276

F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection...

Archive::Zip may not properly parse the file sizes of Zip archives

Overview Archive::Zip does not properly parse Zip files and may incorrectly interpret malformed zip archives to contain zero length/size files. As a a result, anti-virus software using Archive::Zip may fail to detect malicious content within a Zip archive. Description The Archive::Zip module allo...

Microsoft Word does not check for macros contained in linked template file when opening RTF document

Overview There is a vulnerability caused by a failure to detect macros embedded in templates used by rich text format documents opened in Microsoft Word. This vulnerability may allow the author of a malicious document to execute arbitrary commands as the user who opens the document. Description...

CVE-2002-0896

The throttle capability in Swatch may fail to report certain events if 1 the same type of event occurs after the throttle period, or 2 when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection...

Computer Associates InoculateIT 4.53 - Microsoft Exchange Agent

Computer Associates InoculateIT 4.53 - Microsoft Exchange Agent source : https://www.securityfocus.com/bid/1935/info InoculateIT 4.52 is a popular antivirus agent for Microsoft Exchange Servers. A vulnerability exists in the InoculateIT Agent for MS Exchange that can allow a local attacker to pas...

GPG 1.0.3 doesn't detect modifications to files with multiple signatures

Attached is multiple copies of a file I had signed. Then I started modifying parts of the SIGNED message. To see if gpg could detect that the messages had been altered. It did not detect them, so long as the last signed message had not been altered. Save this message as newfile.asc and run gpg...

DOS on RealSecure 3.2

Bulletin : 243 Title: Denial of Service RealSecure Information Date: 8/4/00 Product: Realsecure Company: ISS - Internet Security Systems Issued by: Mуdulo Security Labs Abstract: The Modulo Security Labs Team found during a test program two ways to stop the ISS RealSecure 3.2.x engine. The engine...