VulnerabilityModified
CVE-2010-5300
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive.
MEDIUM 6.8EPSS 14.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 14.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 14.62% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- jzip/jzip
- Source
- cve@mitre.org
References
- http://osvdb.org/show/osvdb/65041
- http://packetstormsecurity.com/files/126216/Jzip-2.0.0.132900-Buffer-Overflow.htmlExploit
- http://seclists.org/fulldisclosure/2010/Apr/79
- http://www.exploit-db.com/exploits/32899Exploit
- https://www.corelan.be/index.php/forum/security-advisories-archive-2010/corelan-10-021-jzip-zip-seh-bof
- http://osvdb.org/show/osvdb/65041
- http://packetstormsecurity.com/files/126216/Jzip-2.0.0.132900-Buffer-Overflow.htmlExploit
- http://seclists.org/fulldisclosure/2010/Apr/79
- http://www.exploit-db.com/exploits/32899Exploit
- https://www.corelan.be/index.php/forum/security-advisories-archive-2010/corelan-10-021-jzip-zip-seh-bof
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.