CVE-2010-2434

Опубликовано: 25 июн. 2010

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Buffer overflow in Arcext.dll 2.16.1 and earlier in pon software Explzh 5.62 and earlier allows remote attackers to execute arbitrary code via an LZH LHA file with a crafted header that is not properly handled during expansion.

Ссылки

http://jvn.jp/en/jp/JVN34729123/index.html
Third Party Advisory
Vendor Advisory
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000026.html
Third Party Advisory
VDB Entry
http://osvdb.org/65666
Broken Link
http://secunia.com/advisories/40324
Third Party Advisory
Vendor Advisory
http://www.ponsoftware.com/archiver/bug.htm#lzh_bufover
Vendor Advisory
http://www.securityfocus.com/bid/41025
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/59624
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN34729123/index.html
Third Party Advisory
Vendor Advisory
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000026.html
Third Party Advisory
VDB Entry
http://osvdb.org/65666
Broken Link
http://secunia.com/advisories/40324
Third Party Advisory
Vendor Advisory
http://www.ponsoftware.com/archiver/bug.htm#lzh_bufover
Vendor Advisory
http://www.securityfocus.com/bid/41025
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/59624
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ponsoftware:explzh:*:*:*:*:*:*:*:*

Версия до 5.62 (включая)

EPSS

Процентиль: 90%

0.05333

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-7q5v-q958-rj47

github

больше 3 лет назад