Lucene search

K
kasperskyKaspersky LabKLA10096
HistoryMay 09, 2006 - 12:00 a.m.

KLA10096 ACE vulnerability in CAM UnZip

2006-05-0900:00:00
Kaspersky Lab
threats.kaspersky.com
17

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.7%

Detect date:

05/09/2006

Severity:

High

Description:

A buffer overflow was found in CAM UnZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP archive.

Affected products:

CAM UnZip versions 4.0, 4.3

Solution:

Update to latest version

Impacts:

ACE

Related products:

CAM UnZip

CVE-IDS:

CVE-2006-21615.1High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.7%

Related for KLA10096