CVE-2006-5937

Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted 1 CAB or 2 RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information...

CVE-2006-5939

Grisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service crash via a crafted DOC file that triggers a divide-by-zero error. NOTE: some of these details are obtained from third party information...

CVE-2006-5938

Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB file...

CVE-2006-5916

CVE-2006-5916 affects Intego VirusBarrier X4. The vulnerability allows context-dependent attackers to bypass virus protection by rapidly injecting a large number of infected files into the filesystem, which prevents VirusBarrier from processing all files. The available sources confirm the product...

CVE-2006-5916

Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files...

AVG Anti-Virus多个远程代码执行漏洞

AVG Anti-Virus是一款功能完备的杀毒软件。 AVG Anti-Virus的文件解析引擎存在多个漏洞，目前已确定的漏洞包括： - 解析.CAB文件时的整数溢出可能导致堆溢出； - 解析.CAB文件时未初始化变量； - 解析.DOC文件时会分隔为0； - 解析.RAR文件时的整数溢出可能导致堆溢出； - 解析.EXE文件时存在整数问题。 如果攻击者创建了特制文件的话，这些漏洞就可能导致远程执行任意代码。 Grisoft AVG Anti-Virus 7.1.407 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote)

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2006.002 13-Nov-2006 Vendor: Grisoft Inc., http://grisoft.com Product: AVG Anti-Virus Vulnerability: Arbitrary Code Execution remote Vendor communication: 2006/08/24 initial notification to Grisoft Inc. 2006/08/24 Grisoft Inc. Respon...

Do a good Defense: virus destroy hardware there are seven large-loss trick-vulnerability warning-the black bar safety net

CIH virus has turned everyone's panic, set off no small waves. Previous various virus only up to destroy hard drive data, and CIH was able to invade the on-Board Flash BIOS, the destruction of its contents and to make the Board scrapped. CIH lesson tells us:do not despise viruses to hardware...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script...

CVE-2006-5645

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service infinite loop via a malformed RAR archive with an Archive Header section with...

CVE-2006-5646

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service memory corruption via a CHM file with an LZX...

CVE-2006-4839

Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service memory consumption via a file that is compressed with Petite and contains a large number of sections...

CVE-2006-4839

Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service memory consumption via a file that is compressed with Petite and contains a large number of sections...

CVE-2006-5646

CVE-2006-5646 is a heap-based buffer overflow in Sophos products when archive scanning is enabled. A CHM file with an LZX decompression header that specifies Window_size = 0 can cause memory corruption leading to a denial of service. Affected are Sophos Anti-Virus and Endpoint Security before 6.0...

CVE-2006-5647

The CVE-2006-5647 issue affects Sophos Anti-Virus/Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and older platforms before 4.11. It is a CHM chunk header memory-corruption vulnerability triggered by malformed CHM files with a large name length; remote attackers could cause m...

CVE-2006-5647

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via a malformed CHM file with a large name length in the CHM chunk...

CVE-2006-4839

CVE-2006-4839 affects Sophos Anti-Virus 5.1. The vulnerability occurs when the scanning engine processes a Petite-compressed file with a large number of sections, causing memory exhaustion and a denial-of-service condition on vulnerable systems. Exploitation is remote and can impact auto-scan/fil...

CVE-2006-5645

Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled scanning of archives" is set, allows remote attackers to cause a denial of service infinite loop via a malformed RAR archive with an Archive Header section with...

CVE-2006-5646

Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when archive scanning is enabled, allows remote attackers to trigger a denial of service memory corruption via a CHM file with an LZX...

PwsPHP 1.1 - themesfin.php Remote File Inclusion

PwsPHP 1.1 - themesfin.php Remote File Inclusion ========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP =============...