58 matches found
MikeyZip 1.1 - .zip Local Buffer Overflow
MikeyZip 1.1 - .zip Local Buffer Overflow !/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A us...
JVN#85599999: Explzh may insecurely load executable files
Explzh is a file compression/extraction software supporting multiple file formats. Explzh loads certain executables .exe when extracting files. Explzh contains an issue with the file search path, which may insecurely load executables. Impact An attacker may execute arbitrary code with the privile...
httpd: possible temporary DoS (CPU consumption) in mod_deflate
The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...
httpd: possible temporary DoS (CPU consumption) in mod_deflate
The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...
DEBIAN-CVE-2009-1891
The moddeflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service CPU consumption...
FreeBSD Security Advisory (FreeBSD-SA-05:11.gzip.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:11.gzip.asc ADV FreeBSD-SA-05:11.gzip.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
FreeBSD Security Advisory (FreeBSD-SA-05:11.gzip.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:11.gzip.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FreeBSD Security Advisory (FreeBSD-SA-06:21.gzip.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:21.gzip.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Debian Security Advisory DSA 1026-1 (sash)
The remote host is missing an update to sash announced via advisory DSA 1026-1. Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. A...
Debian: Security Advisory (DSA-763-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
JVN#82610488 Lhaplus buffer overflow vulnerability
Lhaplus, file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user decompresses a specially crafted file, an attacker could execute arbitrary code with the privilege of the user. This vulnerability is different from...
Design/Logic Flaw
Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service CPU consumption via a crafted UPX compressed file with a negative offset, which triggers an infinite loop during decompression...
RHEL 4 : ncompress (RHSA-2006:0663)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2006:0663 advisory. The ncompress package contains file compression and decompression utilities, which are compatible with the original UNIX compress utility .Z file...
Low: Red Hat Security Advisory: ncompress security update
Updated ncompress packages that address a security issue and fix bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The ncompress package contains file compression and decompression utilities, which are compatible with the...
DSA-1026-1 sash - buffer overflows
Bulletin has no description...
Debian DSA-763-1 : zlib - remote DoS
Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. This problem does not affect the old stable distribution woody. %NASLMINLEVEL 70300 ...
DSA-763-1 zlib - buffer overflow
Bulletin has no description...
FreeBSD-SA-05:11.gzip
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-05:11.gzip Security Advisory The FreeBSD Project Topic: gzip directory traversal and permission race vulnerabilities Category: contrib Module: gzip Announced:...