CVE-2012-1162: Buffer Overflow
Heap-based buffer overflow in the zipreadcdir function in zipopen.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1162?
CVE-2012-1162 is classified as a medium severity vulnerability due to its potential to cause application crashes and execute arbitrary code.
How do I fix CVE-2012-1162?
To mitigate CVE-2012-1162, users should upgrade to a version of libzip that is 0.10 or higher, as newer versions contain patches for this vulnerability.
What type of vulnerability is CVE-2012-1162?
CVE-2012-1162 is a heap-based buffer overflow vulnerability that may be exploited via specially crafted zip archive files.
Who is affected by CVE-2012-1162?
CVE-2012-1162 affects users of libzip version 0.10, which is utilized in various applications for zip file handling.
What can attackers do exploit CVE-2012-1162?
Attackers can exploit CVE-2012-1162 to cause a denial of service by crashing applications and potentially executing arbitrary code.