Medium severity flaw with Ark

I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of the temporary file name. Whilst this doe...

Ark 2.16 Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110726 Date: 26th July 2011 Author: Tim Brown URL: / Product: Ark 2.16 Vendor: KDE Risk: Medium Summary The Ark archiving tool is vulnerable to directory traversal via malformed Zip files. When attempts are made...

FastStone multiple security vulnerabilities

Multiple vulnerabilities on ZIP files processing...

[RT-SA-2011-003] Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances

Advisory: Authentication Bypass in Configuration Import and Export of ZyXEL ZyWALL USG Appliances Unauthenticated users with access to the management web interface of certain ZyXEL ZyWALL USG appliances can download and upload configuration files, that are applied automatically. Details =======...

CVE-2010-3450

Multiple directory traversal vulnerabilities in OpenOffice.org OOo 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. dot dot in an entry in 1 an XSLT JAR filter description file, 2 an Extension aka OXT file, or unspecified other 3 JAR or 4 ZIP files...

VideoLAN VLC Renamed Zip File Handling Code Execution

VLC media player is a free multimedia player for various audio and video formats as well as DVDs, VCDs, and various streaming protocols. A memory corruption vulnerability exists in VideoLAN's VLC Media Player. The vulnerability is due to an uninitialized pointer dereference while handling zip fil...

CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability

This host is installed with CursorArts ZipWrangler and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodcursorartszipwranglerbofvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability Authors: Madhuri D...

Sent Recursive Archive (Mailbomb)

This script sends the Universum.zip recursive archive to the mail server. OpenVAS Vulnerability Test $Id: GSHBsmtpmailbombtest.nasl 7061 2017-09-05 11:50:40Z teissa $ Sent Recursive Archive Mailbomb Authors: Thomas Rotter Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.n...

WinMount MOU 3.3.0401 File Handling Overflow

WinMount MOU File Handling Overflow Vulnerability Vulnerability: WinMount 3.3.0401 Vendor: www.winmount.com 1 Software Description: WinMount is an useful windows utility. It is a compression tool, also a virtual drive tool. It can compress files, decompress/ browse/convert compressed archieves, i...

Researchers Find Malware in Zip Files

Security researchers have discovered flaws in common file formats, including .zip, which can be used to sneak malware onto computers by evading antivirus detection and will present their findings at Blackhat Europe. Read the full article. CNet...

SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12336)

This update brings IBM Java 5 to Service Release 9. It fixes the following security problems : - A security vulnerability in the Java Runtime Environment JRE may allow an untrusted applet or application to list the contents of the home directory of the user running the applet or application...

Ubuntu: Security Advisory (USN-720-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Avira AntiVir Zip Scan Evasion

The remote host is running an Avira AntiVir product. The scan engine of the installed product is earlier than 7.9.0.148 / 8.2.0.148. Such versions reportedly fail to properly inspect specially crafted 'ZIP' files. An attacker could embed code in a ZIP file in order to circumvent detection by...

Mandriva Update for kdeutils MDVA-2008:046 (kdeutils)

Check for the Version of kdeutils OpenVAS Vulnerability Test Mandriva Update for kdeutils MDVA-2008:046 kdeutils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

PHP 5.x < 5.2.9 Multiple Vulnerabilities

Binary data 4943.prm...

PHP < 5.2.9 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.2.9. Such versions may be affected by several security issues : - Background color is not correctly validated with a non true color image in function 'imagerotate'. CVE-2008-5498 - A denial of service conditi...

CVE-2008-0758

Multiple directory traversal vulnerabilities in the Zidget/HTTP embedded HTTP server in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allow remote attackers to read arbitrary 1 gif, 2 png, 3 jpg, 4 xml, 5 ico, 6 zip, and 7 html files via a ".." dot dot backslash sequence in the filename...

Directory traversal

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter in a save action...

CVE-2008-0480

Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter to 1 RTEfilebrowser.asp or 2 filebrowser.asp...

Directory traversal

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...