CVE-2010-1685

CRITICO 9.3CVE-2010-1685 · Published 04/05/2010 · updated 16/06/2026

In breve

CVE-2010-1685 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda zipwrangler (cursorarts).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.6%, superiore al 95.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
zipwrangler cursorarts	`= 1.20`	No fix yet

Description

Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.

References

osvdb.org/64079
secunia.com/advisories/39575 · Vendor Advisory
corelan.be/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow
seclists.org/fulldisclosure/2010/Apr/331

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free