CVE-2007-1614
EPSS 6.2%zziplib - arbitrary code execution
發布日:2007/3/23修改日:2026/4/28
也稱為:DEBIAN-CVE-2007-1614
描述
Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long filename.
受影響套件(2)
- Debian/zziplibfrom 0, < 0.13.49-0
- Debian/zziplibfrom 0, < 0.12.83-8lenny1