CVE-2007-0949

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

CVE-2007-0949

The CVE-2007-0949 issue affects iTinySoft Studio Total Video Player (version 1.03, and possibly earlier; later reports include 1.20 and 1.30) and is caused by a stack-based buffer overflow when parsing .m3u playlist files containing a long file name. This leads to remote arbitrary code execution....

iTinySoft Studio Total Video Player buffer overflow

Buffer overflow on .m3U files parsing...

CVE-2007-0949: Undefined Security Weakness

Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary code via a M3U playlist file that contains a long file name. NOTE: it was later reported that 1.20 and 1.30 are also affected...

Total Commander任意文件删除漏洞

Total Commander是一款磁盘文件管理软件。 Total Commander存在输入验证错误，本地攻击者可以利用漏洞删除任意系统文件。 问题是Total Commander处理恶意构建的RAR文件存在问题，由于输入验证问题，可导致删除或者破坏系统文件，造成拒绝服务攻击。 Total Commander Total Commander 升级程序： Total Commander Total Commander 0 Total Commander Total Commander 6.56 http://www.ghisler.com/download.htm...

Information disclosure

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263

Total Commander up to version 6.5.5 is affected by an unspecified vulnerability that allows user-assisted remote attackers to delete arbitrary files and corrupt the filesystem via a crafted RAR file. The issue is described in multiple sources as affecting Total Commander before 6.5.6; CVSS-derive...

CVE-2007-0263

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-0263: Undefined Security Weakness

Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6837

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

CVE-2006-6837

Technical details about CVE-2006-6837 are not publicly provided in the supplied documents; monitor for updates.

CVE-2006-6837: Undefined Security Weakness

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

CVE-2006-6837

Multiple stack-based buffer overflows in the 1 LoadTree, 2 ReadHeader, and 3 LoadXBOXTree functions in the ISO isowincmd plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image...

[vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability

vuln.sg Vulnerability Research Advisory isowincmd Plugin for Total Commander Buffer Overflow Vulnerability by Tan Chew Keong Release Date: 2006-12-30 Summary ------- A vulnerability has been found in isowincmd Total Commander Plugin. When exploited, the vulnerability allows execution of arbitrary...

Total Commands ISO_WinCmd插件多个远程栈溢出漏洞

Total Commander（原Windows Commander）是一款磁盘文件管理软件，可以取代资源管理器。 Total Commander的isowincmd插件在创建ISO镜像中文件的完整路径名时存在栈溢出漏洞。 溢出发生在LoadTree和ReadHeader函数中，这两个函数通过读取ISO文件中的目录项创建ISO镜像中每个文件的完整路径名。从每个目录项读取的目录名通过lstrcatA连接到一起，最后连接到文件名，然后使用不安全的lstrcpyA函数将创建的完整路径名拷贝到固定长度的栈缓冲区。...

Total Commander iso_wincmd plugin buffer overflow

Buffer overflow on ISO files parsing...

AR Memberscript (usercp_menu.php) Remote File Include Vulnerability

No description provided by source. Author: ex0 armemberscript - remote file include vulnerability all versions There is no vendo patch, and doubt there will be. I havnt been able to get in touch with the vendor for 2 months armemberscript is a script used by many anime sites to manage their...

PT-2006-7073 · Midicart · Midicart

Name of the Vulnerable Software and Affected Versions: Midicart affected versions not specified Description: The issue allows remote attackers to manipulate the total price of a shopping cart by entering negative numbers in the Qty field of the viewcart function in Midicart. Recommendations: At t...

Linux Kernel 2.6.13 2.6.17.4 - logrotate prctl() Local Privilege Escalation

Linux Kernel 2.6.13 2.6.17.4 - logrotate prctl Local Privilege Escalation / $Id: raptorprctl2.c,v 1.3 2006/07/18 13:16:45 raptor Exp $ raptorprctl2.c - Linux 2.6.x suiddumpable2 logrotate Copyright c 2006 Marco Ivaldi The suiddumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4,...