Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2015-2331

libzip: integer overflow when processing ZIP archives

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 27.4% KEV · Not listed
Vendors
Debian Fedoraproject Nih and 2 more
Products
Debian Linux Fedora Libzip and 2 more
CVE-2012-1162

libzip: heap overflow flaw when processing malformed zip file

Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."

CVSS 2.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Nih
Products
Libzip
CVE-2012-1163

libzip: integer overflow when processing malformed zip file

Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.

CVSS 2.0 · 6.8 Medium EPSS 2.6% KEV · Not listed
Vendors
Nih
Products
Libzip