PT-2006-1901 · Zoo · Zoo
CVSS v2.0
5.1
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
zoo versions 2.10 and earlier
Description
The issue is related to a stack-based buffer overflow in the fullpath function, which can be exploited by user-assisted attackers using a crafted ZOO file. This can cause the combine function to return a longer string than expected, potentially allowing the execution of arbitrary code.
Recommendations
For zoo versions 2.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Zoo