Wednesday, February 7, 2018

Multiple buffer overflow vulnerabilities in InfoZip UnZip

1) Heap-based buffer overflow in password protected ZIP archives (CVE-2018-1000035) InfoZip's UnZip suffers from a heap-based buffer overflow when uncompressing password protected ZIP archives. An attacker can exploit this vulnerability to overwrite heap chunks to get arbitrary code execution on ...

from Google Alert - vulnerability http://ift.tt/2nPuWF7
via IFTTT

No comments:

Post a Comment