CVE-2012-1162 PUBLISHED CVSS 7.5 HIGH

Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."

EPSS 1.97% · 83.4th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
1.97%
83.4th percentile

Affected Products

VendorProductVersions
nihlibzip0.10
n/an/an/a

Timeline

References

Open in Interactive Console →