PT-2012-3892 · 360 · 360Zip

Publicado 2012-04-11 · Atualizado 2017-12-20 · CVE-2012-2225

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 360zip version 1.93beta

Description The issue allows remote attackers to execute arbitrary code. This is related to file browsing and file extraction.

Recommendations For version 1.93beta, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-2225

Produtos afetados

360Zip

Referências · 3

• http://blog.vulnhunt.com/index.php/2012/01/01/cal-2011-0080 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2225 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74810 · Nota