CVE-2010-5300 Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive.
MediumCVSS 6.8
EPSS 14.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jzip | = 1.3 | No fix listed |
| jzip | = 2.0.0.132900 | No fix listed |
References
- 65041 vdb-entry
- packetstormsecurity.com exploit
- 20100406 [SECURITY] - Jzip (.zip) Unicode bof Vulnerability mailing-list
- 32899 exploit
- www.corelan.be