Lucene search

K
cveMitreCVE-2009-1057
HistoryMar 24, 2009 - 2:30 p.m.

CVE-2009-1057

2009-03-2414:30:00
CWE-119
mitre
web.nvd.nist.gov
21
security
vulnerability
zipitfast! 3.0
cve-2009-1057
remote execution
memory corruption
format string buffer overflow
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.035

Percentile

91.6%

MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a “format string buffer overflow.” NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.

Affected configurations

Nvd
Node
microsmartszipitfast\!Match3.0
VendorProductVersionCPE
microsmartszipitfast\!3.0cpe:2.3:a:microsmarts:zipitfast\!:3.0:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

Low

EPSS

0.035

Percentile

91.6%

Related for CVE-2009-1057