CVE-2018-10027

HIGH 7.8CVE-2018-10027 · Published 17/05/2018 · updated 17/06/2026

In short

CVE-2018-10027 is a HIGH (CVSS 7.8) vulnerability affecting alzip (estsoft).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.7% of all vulnerabilities.
Fix: update to 10.76 or later.

Package	Affected versions	Patched versions
alzip estsoft	`< 10.76`	`10.76`

Description

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Coders, %PROGRAMFILES(X86)%\ESTsoft\ALZip\Formats, or %PROGRAMFILES(X86)%\ESTsoft\ALZip\Coders.

References

pastebin.com/XHMeS7pQ · Third Party Advisory
altools.co.kr/Support/Notice_Contents.aspx · Release Notes

More vulnerabilities in alzip

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

alzip

estsoft

< 10.76

10.76

Description

More vulnerabilities in alzip

See all →