Bugtraq mailing list archives

[vuln.sg] yEnc32 Decoder Long Filename Buffer Overflow Vulnerability

From: vulnpost-remove () vuln sg
Date: 12 May 2007 02:58:11 -0000

[vuln.sg] Vulnerability Research Advisory

yEnc32 Decoder Long Filename Buffer Overflow Vulnerability

by Tan Chew Keong
Release Date: 2007-05-12

Summary
-------
A vulnerability has been found in yEnc32. When exploited, the vulnerability allows execution of arbitrary code when the 
user decodes a specially crafted yEnc encoded file.

Tested Versions
---------------
yEnc32 version 1.0.7.207

Details
-------
http://vuln.sg/yenc32-107-en.html
http://vuln.sg/yenc32-107-jp.html

Current thread:

[vuln.sg] yEnc32 Decoder Long Filename Buffer Overflow Vulnerability vulnpost-remove (May 12)