EUVD-2006-5946

Malware in sbrugna...

EUVD-2006-5947

Malware in sbrugna...

EUVD-2006-2482

Malware in sbrugna...

PentaWare PentaZip文档处理多个安全漏洞

PentaZip是一款压缩/解压工具，可以生成CAB、TAR和ZIP等格式的压缩文档。 PentaZip在解压各种文档时存在输入验证错误，允许攻击者使用“../”目录遍历序列将文件解压到指定目录以外的任意位置。 此外choShilA.bpl文件中的错误还可能导致用户在右击有超长文件名的文件时系统崩溃。 PentaWare PentaZip 8.5.1.190 PentaWare PentaSuite-PRO 8.5.1.221 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-5963

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ dot dot slash in a filename...

CVE-2006-5964

choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers to cause a denial of service system crash by right clicking on a file with a long filename...

CVE-2006-5963

CVE-2006-5963 affects PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 (PentaWare components). The connected documents confirm a directory traversal vulnerability that allows a user-assisted remote attacker to extract files to arbitrary pathnames via a ../ sequence in a filename, enabling write to...

CVE-2006-5964

CVE-2006-5964 affects PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 (PentaWare/PentaZip). The issue is a denial-of-service via right-clicking a file with a long filename, enabling local users and user-assisted remote attackers to crash the system. Root cause centers on handling of long filename...

CVE-2006-5963

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ dot dot slash in a filename...

KLA10293 Multiple vulnerabilities in PentaWare

Multiple serious vulnerabilities have been found in PentaWare. Malicious users can exploit these vulnerabilities to cause denial of service or extract files to an arbitrary directory. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via a specially designed...

CVE-2006-2482

Heap-based buffer overflow in the TZipTV component in 1 ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, 2 PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE:...