CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
96.4%
Added: 06/24/2010
CVE: CVE-2010-1458
BID: 39565
OSVDB: 63899
The TweakFS Zip Utility is included in the TweakFS Flight Simulator X Utilities.
A buffer overflow vulnerability in the TweakFS Zip Utility allows command execution when a user opens a ZIP archive containing a long, specially crafted filename.
Do not open untrusted ZIP files using the TweakFS Zip Utility.
<http://archives.neohapsis.com/archives/fulldisclosure/2010-04/0242.html>
Exploit works on TweakFS Zip Utility 1.0 and requires a user to open the exploit file.
Windows