10
CVSSv2

CVE-2004-1010

Published: 01/03/2005 Updated: 03/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote malicious users to execute arbitrary code via a ZIP file containing a long pathname.

Vulnerable Product Search on Vulmon Subscribe to Product

info-zip zip 2.3

Vendor Advisories

Synopsis zip security update Type/Severity Security Advisory: Low Topic An updated zip package that fixes a buffer overflow vulnerability is nowavailable Description The zip program is an archiving utility which can create ZIP-compatiblearchivesA buffer overflow bug has been discovered in ...
HexView discovered a buffer overflow in the zip package The overflow is triggered by creating a ZIP archive of files with very long path names This vulnerability might result in execution of arbitrary code with the privileges of the user who calls zip ...
A buffer overflow has been discovered in zip, the archiver for zip files When doing recursive folder compression the program did not check the resulting path length, which would lead to memory being overwritten A malicious person could convince a user to create an archive containing a specially crafted path name, which could lead to the executio ...