CVE-2017-11323

Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename...

CVE-2017-11323

CVE-2017-11323 affects ESTsoft ALZip 8.51 and earlier. The root cause is a stack-based buffer overflow in the handling of MS-DOS device files, exploitable remotely when a crafted filename begins with substrings like AUX. Reported impact is arbitrary code execution with the attacker likely remote,...

PT-2017-11922

Name of the Vulnerable Software and Affected Versions ESTsoft ALZip versions 8.51 and earlier Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted MS-DOS device file. This can be achieved by using a specific substring, such as "AUX", as t...

CVE-2017-11323: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename...