CVE-2007-0445

Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ archives.

• http://secunia.com/advisories/24778Patch, Vendor Advisory
• http://www.kaspersky.com/technews?id=203038693Patch
• http://www.kaspersky.com/technews?id=203038694Patch
• http://www.securityfocus.com/archive/1/464878/100/0/threaded
• http://www.securityfocus.com/bid/23346
• http://www.securitytracker.com/id?1017882
• http://www.securitytracker.com/id?1017883
• http://www.vupen.com/english/advisories/2007/1268
• http://www.zerodayinitiative.com/advisories/ZDI-07-013.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33489
• http://secunia.com/advisories/24778Patch, Vendor Advisory
• http://www.kaspersky.com/technews?id=203038693Patch
• http://www.kaspersky.com/technews?id=203038694Patch
• http://www.securityfocus.com/archive/1/464878/100/0/threaded
• http://www.securityfocus.com/bid/23346
• http://www.securitytracker.com/id?1017882
• http://www.securitytracker.com/id?1017883
• http://www.vupen.com/english/advisories/2007/1268
• http://www.zerodayinitiative.com/advisories/ZDI-07-013.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33489

Published

Apr 6, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0436Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Ins…
• CVE-2007-0437Multiple cross-site scripting (XSS) vulnerabilities in the s…
• CVE-2007-0441Unspecified vulnerability in HP OpenView Network Node Manage…
• CVE-2007-0442Unspecified vulnerability in IBM OS/400 R530 and R535 has un…
• CVE-2007-0443Multiple buffer overflows in the CDDBControl ActiveX control…
• CVE-2007-0444Stack-based buffer overflow in the print provider library (c…
• CVE-2007-0446Stack-based buffer overflow in magentproc.exe for Hewlett-Pa…
• CVE-2007-0447Heap-based buffer overflow in the Decomposer component in mu…
• CVE-2007-0448The fopen function in PHP 5.2.0 does not properly handle inv…
• CVE-2007-0449Multiple buffer overflows in LGSERVER.EXE in CA BrightStor A…
• CVE-2007-0450Directory traversal vulnerability in Apache HTTP Server and …
• CVE-2007-0451Apache SpamAssassin before 3.1.8 allows remote attackers to …