First published: Fri Feb 09 2018(Updated: )
A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Info-ZIP Zip | =6.10c22 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1000032 has a high severity due to its potential to cause denial of service and code execution.
To fix CVE-2018-1000032, upgrade to a patched version of Info-Zip UnZip that addresses this heap-based buffer overflow vulnerability.
CVE-2018-1000032 specifically affects Info-Zip UnZip version 6.10c22.
CVE-2018-1000032 is a heap-based buffer overflow vulnerability.
Yes, CVE-2018-1000032 can potentially allow an attacker to achieve code execution.