CVE-2017-11323 Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substri...
HighCVSS 7.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| estsoft alzip | <= 8.51 | No fix listed |
References
- exploit.kitploit.com exploit third-party-advisory
- www.altools.com release-notes vendor-advisory