PT-2015-5205

CVE-2015-1315

·

Publicado

2015-02-17

·

Atualizado

2015-02-24

Descrição por

CVSS 2.0
7.5
Alta
MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Info-Zip UnZip version 6.10b
Description The issue is related to a buffer overflow in the charset to intern function, which can be exploited by remote attackers to execute arbitrary code. This is achieved by converting a crafted string, for example, from CP866 to UTF-8.
Recommendations For Info-Zip UnZip version 6.10b, consider updating to a newer version that addresses this issue, as using a crafted string to exploit the buffer overflow in the charset to intern function poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
USN-2502-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾