Sophos / Trend Micro Antivirus RAR File Denial of Service PoC

Exploit for multiple platform in category dos / poc ============================================================= Sophos / Trend Micro Antivirus RAR File Denial of Service PoC ============================================================= http://www.inj3ct0r.com/sploits/6241.rar 0day.today 2018-03...

Sophos Trend Micro AntiVirus - .RAR File Denial of Service (PoC)

Sophos Trend Micro AntiVirus - .RAR File Denial of Service PoC Multiple Vendor Antivirus RAR File Denial of Service Vulnerability https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2912.rar 12102006-sophosintifiniti.rar milw0rm.com 2006-12-10...

Sophos / Trend Micro AntiVirus - '.RAR' File Denial of Service (PoC)

Multiple Vendor Antivirus RAR File Denial of Service Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2912.rar 12102006-sophosintifiniti.rar milw0rm.com 2006-12-10...

[Full-disclosure] iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability

Multiple Vendor Antivirus RAR File Denial of Service Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND AntiVirus products typically handle searching files for known viruses within their scan engines. Most scan engin...

Sophos antivirus and Trend Micro antivirus RAR files DoS

Endless loops and hangs on scanning archives with packsize and headsize of zero...

Trend Micro OfficeScan Wizard和CgiRemoteInstall远程缓冲区溢出漏洞

Trend Micro OfficeScan是流行的反病毒解决方案。 Trend Micro OfficeScan存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务或缓冲区溢出攻击。 问题存在于"PCCSRV\Webconsole\RemoteInstallCGI\Wizard.exe"和"PCCSRV\Webconsole\RemoteInstallCGI\CgiRemoteInstall.exe"组件处理畸形参数时存在缓冲区溢出错误，提交精心构建的数据可能导致以应用服务程序进程权限执行任意指令。 Trend Micro OfficeScan Corporate Editi...

CVE-2006-6179

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-6178

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-6179

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-6179

CVE-2006-6179 affects Trend Micro OfficeScan 7.3 (before 7.3.0.1089). A buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe could allow remote code execution. Impact per sources: remote attacker could run arbitrary code; vulnerability is exploitable over the network with l...

CVE-2006-6178

Buffer overflow in PCCSRV\Webconsole\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-6178

CVE-2006-6178 – Details : A buffer overflow in Trend Micro OfficeScan 7.3 (prior to build 7.3.0.1087) affects the PCCSRV/Web_console/RemoteInstallCGI/Wizard.exe, enabling a remote attacker to execute arbitrary code via unknown attack vectors. The NVD entry (CVSS v2 base score 7.5, HIGH) confirms ...

Trend Micro OfficeScan ATXCONSOLE.OCX ActiveX控件格式串处理漏洞

Trend Micro OfficeScan是一种针对整个网段的分布式杀毒软件。 Trend Micro OfficeScan企业版的管理控制台ActiveX控件ATXCONSOLE.OCX没有正确地处理格式串，返回给管理控制台的远程客户端安装名称搜索的特制格式串可能允许访问进程栈。如果成功利用的话，这可能允许用户在运行ActiveX管理控制台的系统上执行任意代码。 Trend Micro OfficeScan Corporate Edition 7.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Trend Micro OfficeScan Management Console ActiveX control format string vulnerability

Overview The Trend Micro OfficeScan Management Console ActiveX control, AtxConsole, contains a format string vulnerability. This vulnerability may be exploited by an attacker to execute arbitrary code, or create a denial-of-service condition. Description Trend Micro's OfficeScan product includes ...

CVE-2006-5211

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes...

CVE-2006-5212

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP...

CVE-2006-5212

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP...

CVE-2006-5211

Trend Micro OfficeScan 6.0 CSM Suite for SMB 2.0 (before 6.0.0.1385) and OfficeScan Corporate Edition 6.5 (before 6.5.0.1418), 7.0 (before 7.0.0.1257), and 7.3 (before 7.3.0.1053) are affected. A vulnerability in the OfficeScan CGI program can be triggered via a specific HTTP request to remove Of...

CVE-2006-5212

CVE-2006-5212 affects Trend Micro OfficeScan in multiple editions: OfficeScan 6.0 CSM SMB 2.0 before 6.0.0.1385; OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418; OfficeScan 7.0 before 7.0.0.1257; and OfficeScan 7.3 before 7.3.0.1053. The vulnerability allows a remote attacker to delete ...

CVE-2006-5211

Trend Micro OfficeScan 6.0 in Client/Server/Messaging CSM Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition OSCE 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes...