Rookie magic bis in the PE file gap write code-vulnerability warning-the black bar safety net

It is also a series of second, the interval time is relatively long. 1. Don't know how many people remember or have seen rookie magic one,mentioned inside of SOFTICE and PE files phase Off of little knowledge,and the PE file structure,you continue to see this are helpful 2. If you're even a rooki...

SUSE-SA:2006:060: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:060 clamav. Two security problems have been found and fixed in the anti virus scan engine 'clamav', which could be used by remote attackers sending prepared E-Mails containing special crafted infected files to potentially execute...

CVE-2007-0879

Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Buffer overflow

Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrary code via certain executable files in PE format. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WEB vulnerabilities mining techniques-vulnerability warning-the black bar safety net

Source: security focus Author: 7all sgh81at163.com WEB vulnerability Mining Technology |=---------------= WEB vulnerability Mining Technology=-----------------------------=| |=-----------------------------------------------------------------=| |=---------------= 7all7all7at163. com...

CVE-2007-0125

Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...

CVE-2007-0125

Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encountering an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a portable executable PE file, which allows remote attackers to cause a denial of service CPU...

Kaspersky反病毒扫描引擎PE文件拒绝服务漏洞

Kaspersky Antivirus是一款流行的客户端和网关病毒扫描。 Kaspersky Antivirus处理特殊构建的PE文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 PE文件中其中之一的头数据是可选Windows头数据段，这个PE头字段数据包含Windows链接器和装载器所需的信息，如果'NumberOfRvaAndSizes'字段中数据包含非法值，可导致应用程序崩溃。 Kaspersky Anti-Virus Personal Pro 5.0 Kaspersky Anti-Virus Personal 5.0 Kaspersky Anti-Virus fo...

Kaspersky Anti-Virus PE File Handling DoS

The version of Kaspersky Anti-Virus installed on the remote host is affected by a denial of service issue that can be triggered with a specially crafted PE portable executable file to send the scanning engine into an infinite loop and prevent scanning of other files. C Tenable Network Security,...

Kaspersky AntiVirus扫描引擎PE文件处理拒绝服务漏洞

Kaspersky Antivirus是非常流行的杀毒软件。 Kaspersky Antivirus在处理特制的PE文件时存在拒绝服务漏洞，远程攻击者可能利用此漏洞导致扫描引擎陷入死循环。 PE文件中的一个头部结构选项是Optional Windows Header部分，该部分包含有Windows链接器和加载器所需要的信息。NumberOfRvaAndSizes字段的无效值会导致Kaspersky在无限循环中反复地寻找并读取文件的同一部分，这样扫描引擎就会陷入死循环，无法再扫描文件。 Kaspersky Labs Kaspersky Antivirus 6.0 for Windows...

Kaspersky Antivirus DoS

Endless loop on invalid NumberOfRvaAndSizes field value of PE file...

[Full-disclosure] iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability

Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability iDefense Security Advisory 01.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 05, 2007 I. BACKGROUND Kaspersky Antivirus is a popular client and gateway virus scanner. For more information see their site:...

CVE-2006-6627

Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allo...

CVE-2006-6627

Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner; and BitDefender products for Microsoft ISA Server and Exchange 5.5 through 2003; allo...

CVE-2006-6627

CVE-2006-6627 affects BitDefender products prior to 20060829, including Antivirus, Antivirus Plus, Internet Security, Mail Protection for Enterprises, and Online Scanner, plus BitDefender products for Microsoft ISA Server and Exchange 5.5–2003. The issue is an integer overflow in the packed PE fi...

Mandrake Linux Security Advisory : clamav (MDKSA-2006:138)

Damian Put discovered a boundary error in the UPX extraction module in ClamAV which is used to unpack PE Windows executables. This could be abused to cause a Denial of Service issue and potentially allow for the execution of arbitrary code with the permissions of the user running clamscan or clam...

BitDefender multiple software products buffer overflow

Heap buffer overflow on PE files parsing...

BitDefender AV Packed PE File Parsing Engine Heap Overflow

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.003 15-Dec-2006 Vendor: BitDefender, http://www.bitdefender.com Affected Products: BitDefender Antivirus, BitDefender Antivirus Plus, BitDefender Internet Security, BitDefender Mail Protection for Enterprises, BitDefender Online...

Clam AntiVirus处理UPX压缩PE文件构建堆溢出漏洞

Clam AntiVirus是一款UNIX环境下开源的防病毒软件。 Clam AntiVirus在处理畸形UPX压缩的文件时存在堆溢出漏洞，远程攻击者可能利用此漏洞完全控制查毒机器。 Clam AntiVirus的pefromupx函数在处理UPX格式压缩的文件构建PE文件时存在堆溢出问题，远程攻击者可能通过恶意的UPX文件在查毒机器上执行任意指令。 ClamAV ClamAV 0.88.3 ClamAV ClamAV 0.88.2 目前厂商已经在0.88.4及以上版本的软件中修补了这个安全问题，请到厂商的主页下载： http://www.clamav.net/...

Debian DSA-1196-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the ClamAV malware scan engine, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4182 Damian Put discovered a heap overflow error in the script ...