Published: 09/05/2007 Updated: 16/10/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

PicoZip allows remote malicious users to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
picozip picozip 4.01
picozip picozip 4.02

/* source: wwwsecurityfocuscom/bid/23823/info The Zoo compression algorithm is prone to a remote denial-of-service vulnerability This issue arises when applications implementing the Zoo algorithm process certain malformed archives A successful attack can exhaust system resources and trigger a denial-of-service condition This issue af ...

NVD-CWE-Other http://www.securityfocus.com/bid/23823 http://securityreason.com/securityalert/2680 http://osvdb.org/41751 https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 http://www.securityfocus.com/archive/1/467646/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29949/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-2536

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect