PT-2018-16791
CVE-2018-5196
·
تاريخ النشر
2018-12-21
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Alzip versions 10.76.0.0 and earlier
Description
The issue is caused by improper bounds checking, leading to a stack overflow. This can be exploited by persuading a victim to open a specially-crafted LZH archive file, potentially allowing an attacker to execute arbitrary code.
Recommendations
For versions 10.76.0.0 and earlier, update to a version that includes proper bounds checking to prevent the stack overflow and arbitrary code execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾