PT-2014-2099
CVE-2010-5300
·
Publicado
2014-06-11
·
Atualizado
2014-06-12
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Jzip versions 1.3 through 2.0.0.132900
Description
The issue is a stack-based buffer overflow that can be triggered by a long file name in a zip archive, potentially allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Recommendations
For Jzip versions 1.3 through 2.0.0.132900, update to a version that fixes this issue to prevent potential exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾