What is the severity of CVE-2012-1163?

CVE-2012-1163 is considered to have a critical severity rating due to the potential for remote code execution.

How do I fix CVE-2012-1163?

To fix CVE-2012-1163, update to a newer version of libzip that has addressed this vulnerability.

What software versions are affected by CVE-2012-1163?

CVE-2012-1163 specifically affects libzip version 0.10.

Can CVE-2012-1163 be exploited remotely?

Yes, CVE-2012-1163 can be exploited remotely by attackers through crafted zip archives.

What action should I take if I am using an affected version of libzip?

If you are using an affected version of libzip, you should immediately apply security updates or patches to mitigate the risk.

Vulnerability/
CVE-2012-1163

medium

6.8

CWE

189 190

12/7/2012

17/9/2024

CVE-2012-1163: Integer Overflow

First published: Thu Jul 12 2012(Updated: )

Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
libzip	=0.10

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-1163?
CVE-2012-1163 is considered to have a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2012-1163?
To fix CVE-2012-1163, update to a newer version of libzip that has addressed this vulnerability.
What software versions are affected by CVE-2012-1163?
CVE-2012-1163 specifically affects libzip version 0.10.
Can CVE-2012-1163 be exploited remotely?
Yes, CVE-2012-1163 can be exploited remotely by attackers through crafted zip archives.
What action should I take if I am using an affected version of libzip?
If you are using an affected version of libzip, you should immediately apply security updates or patches to mitigate the risk.

agent/references
agent/type
agent/severity
agent/weakness
agent/author
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
collector/nvd-index
agent/software-canonical-lookup-request
agent/softwarecombine
agent/tags
agent/source
vendor/nih
canonical/libzip
version/libzip/0.10

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.