CVE-2012-1163 PUBLISHED CVSS 6.800000190734863 MEDIUM

Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.

EPSS 1.38% · 80.2th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
1.38%
80.2th percentile

Affected Products

VendorProductVersions
nihlibzip0.10
n/an/an/a

Timeline

References

Open in Interactive Console →