CVE-2010-1685

Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2010-05-04

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Zipwrangler (Cursorarts)

References

• http://osvdb.org/64079
• http://secunia.com/advisories/39575
• http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow/
• https://seclists.org/fulldisclosure/2010/Apr/331