Description (CNA)
Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.altools.com/ALTools/ALZip/Version-History.aspx
- http://exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.html
ADP enrichment
No English description supplied.