CVE-2007-1614 Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted remote attackers to cause a denial of service (application crash)....
HighCVSS 9.3
EPSS 6.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zziplib | <= 0.13.45 | No fix listed |
| debian/zziplib(Debian:12) | < 0.13.49-0 | 0.13.49-0 |
| debian/zziplib(Debian:13) | < 0.13.49-0 | 0.13.49-0 |
| debian/zziplib(Debian:14) | < 0.13.49-0 | 0.13.49-0 |
References
- 33838 vdb-entry
- 24586 patch third-party-advisory vendor-advisory
- 24708 third-party-advisory
- GLSA-200704-05 vendor-advisory
- sourceforge.net patch
- MDKSA-2007:093 vendor-advisory
- 23013 vdb-entry
- www.securitylab.ru exploit
- ADV-2007-0998 vdb-entry
- Debian Security Tracker CVE-2007-1614 vendor-advisory
- bugs.debian.org issue-tracking