CVE-2012-1452

The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal aka Cat QuickHeal 11.00 allows remote attackers to bypass malware detection via a CAB file with a modified reserved1 field. NOTE: this may later be SPLIT into multiple CVE...

CVE-2012-1442

The ELF file parser in Quick Heal aka Cat QuickHeal 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway formerly Webwasher 2010.1C, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, F-Secure Anti-Virus 9.0.16160.0, Sophos Anti-Virus 4.61.0, Antiy Labs AVL SDK 2.0.3.7, Rising...

CVE-2012-1421

The CVE-2012-1421 entry affects the TAR file parser in Quick Heal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11. The flaw allows remote attackers to bypass malware detection by feeding a POSIX TAR file with an initial ...

CVE-2012-1442

The CVE-2012-1442 entry concerns an ELF file parser flaw that affects multiple antivirus products (e.g., Quick Heal/Cat QuickHeal 11.00, McAfee AV/Engine 5.400.0.1158, McAfee Gateway 2010.1C, eSafe 7.0.17.0, Kaspersky 7.0.0.125, F-Secure 9.0.16160.0, Sophos 4.61.0, AVL SDK 2.0.3.7, Rising 22.83.0...

CVE-2012-1419

CVE-2012-1419 concerns the TAR file parser in ClamAV 0.96.4 and Quick Heal (Cat QuickHeal) 11.00, where a remote attacker can bypass malware detection by providing a POSIX TAR file beginning with an [aliases] sequence. The issue is limited to the TAR parser logic as described; no other components...

CVE-2012-1420

The CVE-2012-1420 entry concerns multiple antivirus products (Quick Heal/Cat QuickHeal 11.00; Command Antivirus 5.2.11.5; F-Prot 4.6.2.117; Fortinet 4.2.254.0; K7 9.77.3565; Kaspersky 7.0.0.125; Antimalware Engine 1.1.6402.0; Microsoft Security Essentials 2.0; NOD32 5795; Norman 6.06.12; Panda 10...

CVE-2012-1448

The CVE-2012-1448 entry affects multiple AV products and parsers (Quick Heal/Cat QuickHeal 11.00, Trend Micro Antivirus 9.120.0.1004, Ikarus Virus Utilities T3 CLI Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti‑Malware 5.1.0.1). The root cause is a CAB file parser flaw th...

CVE-2012-1422

The CVE-2012-1422 entry covers a TAR file-parsing flaw shared by several AV products: Quick Heal (Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03. The issue arises in the TAR parser when processing a POSIX TAR file with an initial ITSF charac...

CVE-2012-1452

CVE-2012-1452 affects the CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (Cat QuickHeal) 11.00. It allows remote attackers to bypass malware detection by delivering a CAB file with a modified reserved1 field. The descripti...

CVE-2012-1426

The CVE-2012-1426 entry describes a vulnerability in the TAR file parser used by Quick Heal (Cat QuickHeal) 11.00 and several antivirus products (Command Antivirus 5.2.11.5, F-Prot 4.6.2.117, K7 AntiVirus 9.77.3565, Norman 6.06.12, Rising 22.83.00.03) where a POSIX TAR file containing an initial ...

CVE-2012-1428

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a POSIX TAR file with a \4a\46\49\46 character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs...

CVE-2012-1427

CVE-2012-1427 affects the TAR file parser in Quick Heal (Cat QuickHeal) 11.00, Norman Antivirus 6.06.12, and Sophos Anti-Virus 4.61.0. The vulnerability allows remote attackers to bypass malware detection by crafting a POSIX TAR file containing a specific character sequence (encoded as �... in th...

CVE-2012-1422

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial ITSF character sequence. NOTE: this may later be SPLIT into multiple...

CVE-2012-1419

The TAR file parser in ClamAV 0.96.4 and Quick Heal aka Cat QuickHeal 11.00 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial aliases character sequence. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the...

Softbiz Quick Ad Manager CSRF

Exploit for php platform in category web applications Exploit Title: Softbiz Quick Ad Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/softbiz-quick-ad-manager/32339/ Category:: webapps Demo : http://www.softbizscripts.com/scripts/ba/admin/ Greetz: Inj3ct0...

Oracle Outside In Library OOXML Overflow

Added: 02/03/2012 CVE: CVE-2012-0110 BID: 51452 OSVDB: 78411 Background Oracle Outside In is a a suite of software development kits that allows developers with a comprehensive solution to access, transform, and control the contents of over 500 unstructured file formats. Problem Outside In version...

Oracle Outside In Library OOXML Overflow

Added: 02/03/2012 CVE: CVE-2012-0110 BID: 51452 OSVDB: 78411 Background Oracle Outside In is a a suite of software development kits that allows developers with a comprehensive solution to access, transform, and control the contents of over 500 unstructured file formats. Problem Outside In version...

Oracle Outside In Library OOXML Overflow

Added: 02/03/2012 CVE: CVE-2012-0110 BID: 51452 OSVDB: 78411 Background Oracle Outside In is a a suite of software development kits that allows developers with a comprehensive solution to access, transform, and control the contents of over 500 unstructured file formats. Problem Outside In version...

Review : GFI LanGuard - Network Security Scanner & Vulnerability Management Tool

I'm a firm believer in multitasking. I tend to work on several things simultaneously; the more monitors I have connected the more things I can do in parallel, and I can bounce back and forth between tasks, given that no one interrupts me. When I find an application that can do more than one thing...

CVE-2011-5030

Cross-site scripting XSS vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to "names of entity bundles."...