CVE-2018-1056

2018-07-2718:00:00

CWE-122

redhat

www.cve.org

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

JSON

An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.

CNA Affected

[
  {
    "product": "advancecomp:",
    "vendor": "amadvance",
    "versions": [
      {
        "status": "affected",
        "version": "2.1-2018/02"
      }
    ]
  }
]