critical9.3Public exploit code
CVE-2010-1685
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file wit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZipWrangler 1.20 - '.zip' File (SEH)2010-04-24 · local · windows · Verified
Impact
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cursorarts | Zipwrangler | Version 1.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/64079
- http://secunia.com/advisories/39575
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow/
- https://seclists.org/fulldisclosure/2010/Apr/331
- http://osvdb.org/64079
- http://secunia.com/advisories/39575
- http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow/
- https://seclists.org/fulldisclosure/2010/Apr/331