Thierry Zoller

A vulnerabilidade permite que a detecção de vírus seja contornada por meio de um campo de checksum BZ2 manipulado em um arquivo compactado. Isso se deve a um problema no mecanismo de análise do antivírus ESET.

A vulnerabilidade permite que a detecção de vírus seja contornada por meio de um arquivo ZIP malicioso.

A vulnerabilidade permite que a detecção de vírus seja contornada por meio de um GPFLAG malicioso em um arquivo ZIP.

A vulnerabilidade permite que a detecção de vírus seja contornada por meio de dados de método de compactação manipulados em um arquivo GZIP. Isso é feito explorando o mecanismo de análise do antivírus da F-Secure.

A vulnerabilidade permite que a detecção de vírus seja contornada por meio de um arquivo ISO malicioso. Isso afeta vários produtos da Avira.

A vulnerabilidade permite que a detecção de vírus seja contornada por meio de um campo de informações de compactação (Compression Information Field) manipulado em um arquivo ZIP.

The issue allows remote authenticated users to execute arbitrary SQL commands via the `ct100$4MainController$TextBoxSearchValue` parameter, which is the search field in the Help Desk application. This can lead to the execution of operating-system commands.

A directory traversal issue allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel. This can be demonstrated by writing to the Software/ directory.

The issue allows remote attackers to bypass malware detection in an RAR archive by manipulating the archive file format.

The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and browser hang, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, specifically memory consumption, by setting a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and console hang, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the `length` property of a `Select` object.

Name of the Vulnerable Software and Affected Versions: WebKit versions before r41741 Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 Safari (affected versions not specified) Description: The issue allows remote attackers to cause a denial of service, resulting in memory consumption or device reset, via a web page containing an HTMLSelectElement object with a large `length` attribute. This is related to the `length` property of a Select object. Recommendations: For WebKit versions before r41741, update to a version after r41741 to resolve the issue. For Apple iPhone OS versions 1.0 through 2.2.1, update to a version after 2.2.1. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version after 2.2.1. For Safari, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox version 3.0.4 Description: The issue allows remote attackers to cause a denial of service, resulting in an application hang. This is achieved by providing a large value in the `r` attribute of a circle element in the SVG component, which is related to an unclamped loop. Recommendations: For Mozilla Firefox version 3.0.4, consider avoiding the use of large values in the `r` attribute of circle elements in SVG components until a fix is available. As a temporary workaround, restrict the rendering of SVG circle elements with large `r` attribute values to prevent application hangs.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.10 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, application hang, and memory consumption. This can be achieved via a KEYGEN element used in conjunction with either a META element that specifies automatic page refresh or a JavaScript onLoad event handler for a BODY element. Recommendations: For versions prior to 3.0.10, consider disabling the use of KEYGEN elements in conjunction with META elements that specify automatic page refresh or JavaScript onLoad event handlers for BODY elements until a fix is available.