CVE-2018-5196 Alzip Stack Overflow Vulnerability
HighCVSS 7.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| estsoft alzip | <= 10.76.0.0 | No fix listed |
| estsoft alzip | >= Alzip, <= 10.76.0.0 | No fix listed |
References
- www.altools.co.kr vendor-advisory
- www.boho.or.kr third-party-advisory