Description (CNA)
Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim to open a specially-crafted ISO archive file, an attacker could execution arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ESTSOFT / ALZIP | affected 10.83 |
CWE
CWE-119
References
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35114
- https://www.altools.co.kr/Download/ALZip.aspx#n
ADP enrichment
No English description supplied.