PT-2014-2099 · Jzip · Jzip

Mr_Me · Publicado 2014-06-11 · Atualizado 2014-06-12 · CVE-2010-5300

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Jzip versions 1.3 through 2.0.0.132900

Description The issue is a stack-based buffer overflow that can be triggered by a long file name in a zip archive, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Recommendations For Jzip versions 1.3 through 2.0.0.132900, update to a version that fixes this issue to prevent potential exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-5300

Produtos afetados

Jzip

Referências · 8

• 🔥 http://exploit-db.com/exploits/32899 · Exploit
• 🔥 https://exploit-db.com/exploits/12081 · Exploit
• 🔥 http://packetstormsecurity.com/files/126216/Jzip-2.0.0.132900-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/32899 · Exploit
• http://osvdb.org/show/osvdb/65041 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-5300 · Nota de Segurança
• http://seclists.org/fulldisclosure/2010/Apr/79 · Nota
• https://corelan.be/index.php/forum/security-advisories-archive-2010/corelan-10-021-jzip-zip-seh-bof · Nota