CVE-2018-1056 An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by t...
HighCVSS 7.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/advancecomp(Debian:12) | < 2.1-1 | 2.1-1 |
| debian/advancecomp(Debian:13) | < 2.1-1 | 2.1-1 |
| debian/advancecomp(Debian:14) | < 2.1-1 | 2.1-1 |
| advancemame advancecomp | < 2.1 | 2.1 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| amadvance advancecomp: | = 2.1-2018/02 | No fix listed |
References
- Debian Security Tracker CVE-2018-1056 vendor-advisory
- bugs.debian.org exploit issue-tracking third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- [debian-lts-announce] 20180213 [SECURITY] [DLA 1281-1] advancecomp security update mailing-list third-party-advisory
- [debian-lts-announce] 20190302 [SECURITY] [DLA 1702-1] advancecomp security update mailing-list third-party-advisory
- [debian-lts-announce] 20211229 [SECURITY] [DLA 2868-1] advancecomp security update mailing-list third-party-advisory
- sourceforge.net issue-tracking third-party-advisory
- USN-3570-1 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking