1296 matches found
DEBIAN-CVE-2008-0318
Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...
CVE-2008-0318
Integer overflow in the cliscanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow...
ClamAV 0.91.2 libclamav MEW PE Buffer Overflow Exploit
No description provided by source. ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...
clamav -- ClamAV libclamav PE File Integer Overflow Vulnerability
iDefense Security Advisory 02.12.08: Remote exploitation of an integer overflow vulnerability in Clam AntiVirus' ClamAV, as included in various vendors' operating system distributions, allows attackers to execute arbitrary code with the privileges of the affected process. The vulnerability exists...
ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow
ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet [email protected] we own dsize in readdesc, src + dsize, exesectionsi + 1.rsz != exesectionsi + 1.rsz exploited with randomizevaspace = 0 ''' import struct exe=...
ClamAV 0.91.2 libclamav MEW PE Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ====================================================== ClamAV 0.91.2 libclamav MEW PE Buffer Overflow Exploit ====================================================== ''' clamav-0.91.2 exploit CVE-2007-6335 c Thomas Pollet email protected we ow...
GLSA-200712-20 : ClamAV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200712-20 ClamAV: Multiple vulnerabilities iDefense reported an integer overflow vulnerability in the cliscanpe function when parsing Portable Executable PE files packed in the MEW format, that could be exploited to cause a...
ClamAV 'libclamav/pe.c' MEW压缩PE文件整数溢出漏洞
ClamAV是一款流行的反病毒应用程序。 Clam AntiVirus解析MEW压缩成的PE文件存在整数溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能导致任意代码执行。 在处理此PE文件时，两可不可信的值直接来自文件而没有任何检查，这些值之后用于算术运算来计算要分配的堆缓冲区，此计算可导致整数溢出，可能以应用程序进程权限执行任意指令。 Clam Anti-Virus ClamAV 0.91.2 升级程序： Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.92...
DEBIAN-CVE-2007-6335
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...
CVE-2007-6335
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...
CVE-2007-6335
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow...
ClamAV < 0.92.0 PE File Handling Integer Overflow (deprecated)
Binary data 4321.prm...
iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability
iDefense Security Advisory 12.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 18, 2007 I. BACKGROUND Clam AntiVirus is a multi-platform anti-virus toolkit released under the GNU Public License. ClamAV is often integrated into e-mail gateways and used to scan e-mail messages for...
SuSE 10 Security Update : clamav (ZYPP Patch Number 2179)
Two security problems have been found in the antivirus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute code. - A problem in dealing with PE Portable Executables aka Windows .EXE files could...
Microsoft Internet Explorer TIF/TIFF Code Execution (MS07-055)
No description provided by source. !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz grabarz at grabarz.info Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584...
Microsoft Internet Explorer - TIF/TIFF Code Execution (MS07-055)
!/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584 Internet Explorer has standart ImageBase address and PE Win32 header is started at 0x00400000 in...
The history of the most simple Windows System Password rescue-vulnerability warning-the black bar safety net
Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...
Crlf injection
CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information in the Image File Header tab via strings with CRLF sequences in the IMAGEEXPORTDIRECTORY array in a PE file, which could complicate forensics investigations...
Buffer overflow
The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service unhandled exception via an invalid RVA address function pointer in 1 an IMAGETHUNKDATA structure, involving the a OriginalFirstThunk and b FirstThunk IMAGEIMPORTDESCRIPTOR fields, or 2...
CVE-2007-4463
The CVE-2007-4463 entry concerns the Fileinfo 2.0.9 plugin for Total Commander. Affected component: PE file handling within the plugin, specifically invalid RVA address function pointers in IMAGE_THUNK_DATA (OriginalFirstThunk/FirstThunk) and IMAGE_EXPORT_DIRECTORY’s AddressOfNames. Root cause: m...