Thierry Zoller

The issue allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This is due to a problem in the ESET AV parsing engine.

The issue allows virus-detection bypass via a crafted ZIP archive.

The issue allows virus-detection bypass via a crafted GPFLAG in a ZIP archive.

The issue allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This is achieved by exploiting the F-Secure AV parsing engine.

The issue allows virus-detection bypass via a crafted ISO archive. This affects various Avira products.

The issue allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive.

The issue allows remote authenticated users to execute arbitrary SQL commands via the `ct100$4MainController$TextBoxSearchValue` parameter, which is the search field in the Help Desk application. This can lead to the execution of operating-system commands.

A directory traversal issue allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel. This can be demonstrated by writing to the Software/ directory.

The issue allows remote attackers to bypass malware detection in an RAR archive by manipulating the archive file format.

The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and browser hang, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, specifically memory consumption, by setting a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service, resulting in memory consumption and console hang, by providing a large integer value for the `length` property of a `Select` object.

The issue allows remote attackers to cause a denial of service due to memory consumption. This is achieved by setting a large integer value for the `length` property of a `Select` object.

Name of the Vulnerable Software and Affected Versions: WebKit versions before r41741 Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 Safari (affected versions not specified) Description: The issue allows remote attackers to cause a denial of service, resulting in memory consumption or device reset, via a web page containing an HTMLSelectElement object with a large `length` attribute. This is related to the `length` property of a Select object. Recommendations: For WebKit versions before r41741, update to a version after r41741 to resolve the issue. For Apple iPhone OS versions 1.0 through 2.2.1, update to a version after 2.2.1. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version after 2.2.1. For Safari, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox version 3.0.4 Description: The issue allows remote attackers to cause a denial of service, resulting in an application hang. This is achieved by providing a large value in the `r` attribute of a circle element in the SVG component, which is related to an unclamped loop. Recommendations: For Mozilla Firefox version 3.0.4, consider avoiding the use of large values in the `r` attribute of circle elements in SVG components until a fix is available. As a temporary workaround, restrict the rendering of SVG circle elements with large `r` attribute values to prevent application hangs.

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 3.0.10 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, application hang, and memory consumption. This can be achieved via a KEYGEN element used in conjunction with either a META element that specifies automatic page refresh or a JavaScript onLoad event handler for a BODY element. Recommendations: For versions prior to 3.0.10, consider disabling the use of KEYGEN elements in conjunction with META elements that specify automatic page refresh or JavaScript onLoad event handlers for BODY elements until a fix is available.