high7.8
CVE-2020-24175
Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a…
Impact
Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yz1 | Yz1 | Versions 0.30, 0.32 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/illikainen/315a420a9c28cbe882e16b8eba40b2e1
- https://gist.github.com/illikainen/ced14e08e00747fef613ba619bb25bb4
- https://illikainen.dev/advisories/014-yz1-izarc
- https://gist.github.com/illikainen/315a420a9c28cbe882e16b8eba40b2e1
- https://gist.github.com/illikainen/ced14e08e00747fef613ba619bb25bb4
- https://illikainen.dev/advisories/014-yz1-izarc