CVE-2019-12807

2019-08-1319:22:35

CWE-119

krcert

www.cve.org

EPSS

0.001

Percentile

31.1%

JSON

Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim to open a specially-crafted ISO archive file, an attacker could execution arbitrary code.

CNA Affected

[
  {
    "product": "ALZIP",
    "vendor": "ESTSOFT",
    "versions": [
      {
        "status": "affected",
        "version": "10.83"
      }
    ]
  }
]

References

www.altools.co.kr/Download/ALZip.aspx#n

www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35114

EPSS

0.001

Percentile

31.1%

JSON

Related for CVELIST:CVE-2019-12807