PT-2012-3892 · 360 · 360Zip

Published 2012-04-11 · Updated 2017-12-20 · CVE-2012-2225

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 360zip version 1.93beta

Description The issue allows remote attackers to execute arbitrary code. This is related to file browsing and file extraction.

Recommendations For version 1.93beta, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2225

Affected Products

360Zip

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-2225 · Security Note
• http://blog.vulnhunt.com/index.php/2012/01/01/cal-2011-0080 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74810 · Note