PT-2025-48798 · Estsoft · Alzip

Published 2025-12-03 · Updated 2025-12-03 · CVE-2025-29864

Positive Technologies (AI Summary)

CVSS v4.0

6.2

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ESTsoft ALZip versions 12.01 through 12.28

Description A protection mechanism failure exists in ESTsoft ALZip on Windows, allowing a bypass of the SmartScreen filter. This issue impacts the way the software handles security checks, potentially enabling malicious files to be executed without proper warning.

Recommendations Update ESTsoft ALZip to version 12.29 or later.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2025-29864

Affected Products

Alzip

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-29864 · Security Note
• https://t.me/cveNotify/144591 · Telegram Post
• https://twitter.com/CVEnew/status/1996140507060109667 · Twitter Post
• https://t.me/CVEtracker/38741 · Telegram Post
• https://altools.co.kr/product/ALZIP · Note