Lucene search
HistoryJul 12, 2012 - 8:55 p.m.
CVE-2012-1162
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.065
Percentile
93.9%
Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an βincorrect loop construct.β
Affected configurations
Node
nihlibzipMatch0.10
Related
seebug
seebug
ubuntucve
ubuntucve
CVE-2012-1162
2012-07-12 00:00:00
cvelist
cvelist
CVE-2012-1162
2012-07-12 20:00:00
cve
cve
CVE-2012-1162
2012-07-12 20:55:14
debiancve
debiancve
CVE-2012-1162
2012-07-12 20:55:14
prion
prion
Heap overflow
2012-07-12 20:55:00
gentoo
gentoo
libzip: Multiple vulnerabilities
2012-03-29 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:034 ] libzip
2012-03-25 00:00:00
libzip securitty vulnerabilities
2012-04-02 00:00:00
[PRE-SA-2012-02] Incorrect loop construct and numeric overflow in libzip
2012-04-02 00:00:00
openvas
openvas
Fedora Update for libzip FEDORA-2012-4485
2012-08-30 00:00:00
Mandriva Update for libzip MDVSA-2012:034 (libzip)
2012-08-03 00:00:00
Gentoo Security Advisory GLSA 201203-23 (libzip)
2012-04-30 00:00:00
nessus
nessus
openSUSE Security Update : libzip (openSUSE-SU-2012:0416-1)
2014-06-13 00:00:00
GLSA-201203-23 : libzip: Multiple vulnerabilities
2012-06-21 00:00:00
Fedora 17 : libzip-0.10.1-1.fc17 (2012-4485)
2012-04-12 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: libzip-0.10.1-1.fc17
2012-04-12 02:48:29
osv
osv
libzip-devel-1.1.3-1.4 on GA media
2024-06-15 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.9
Confidence
High
EPSS
0.065
Percentile
93.9%
Related for NVD:CVE-2012-1162