critical10.0Public exploit code
CVE-2009-1058
Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eZip Wizard 3.0 - Local Stack Buffer Overflow (PoC) (SEH)2009-03-09 · dos · windows · Verified
Impact
Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zipgenius | Zipgenius | All versions |