CVE-2018-1056

An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2018-07-27

Last modified

2024-08-05

Weaknesses

CWE-122, CWE-125

Affected products

• Advancecomp (Advancemame)
• Advancecomp (Amadvance)
• Ubuntu Linux (Canonical)
• Debian Linux (Debian)

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889270
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1056
• https://lists.debian.org/debian-lts-announce/2018/02/msg00016.html
• https://lists.debian.org/debian-lts-announce/2019/03/msg00004.html
• https://lists.debian.org/debian-lts-announce/2021/12/msg00034.html
• https://sourceforge.net/p/advancemame/bugs/259/
• https://usn.ubuntu.com/3570-1/