Various anti-virus vendors are susceptible to an infinite loop denial of service vulnerability when analyzing the ZOO archives.
3b658cea35cfa9bde250c49e4ba202f14f79b5eb8fcd042fa5192a57cab9a7d6Further research has been performed against the Barracuda Convert-UUlib library buffer overflow.
f6951b1ebcbd690adceae17e1c1dfc054bf9a724c4c9727d2dd586cd08c7292fPIRANA is an exploitation framework that tests the security of a email content filter. By means of a vulnerability database, the content filter to be tested will be bombarded by various emails containing a malicious payload intended to compromise the computing platform. PIRANA's goal is to test whether or not any vulnerability exists on the content filtering platform.
4f4bf22a3446dcede66d3f4fc60bfd1cdac5e6fd174c4f6f682bbdf405cdca09Dr.Web 4.33 antivirus LHA long directory name heap overflow: When building a special LHA archive with a long directory name in an extended directory header, a fixed size buffer on the heap is overflowed. When processing this malicious archive, it is then possible to make Dr.Web run arbitrary code by overwriting some internal malloc management informations.
2a30296b1d42bc902eefd52faffa18b6b2e14bb10873a005d4d3df2b73a5ab6cPIRANA is an exploitation framework that tests the security of a email content filter. By means of a vulnerability database, the content filter to be tested will be bombarded by various emails containing a malicious payload intended to compromise the computing platform. PIRANA's goal is to test whether or not any vulnerability exists on the content filtering platform.
3657e8c9cb39fe8805ada794f7b9e5b5c772a6b208998810e38934e7268cc63dThe Barracuda Spam Firewall with firmware less than 3.3.03.022 and spamdef less than 3.0.10045 suffers from a remote compromise via an email containing a specially crafted LHA archive.
1fc543a965dad878e85c76e8374b6bf456536444e43cef102ce41c68fd3b54f1The Barracuda Spam Firewall with firmware less than 3.3.03.022 and spamdef less than 3.0.9388 suffers from a remote compromise via an email containing a specially crafted ZOO archive.
b1a125d11ebe95bcf9be62768a67891c17278898c0cd6217c2f1e78f625b5082When feeding zoo a specially crafted archive, an attacker may be able to trigger a stack overflow and seize control of the program.
9422982e39289d304e78eb097b387485df9810f1e7aa80c2b08a8bf23dce1d39
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed