2 matches found
CVE-2006-0926: Undefined Security Weakness
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...
2.6CVSS6AI score0.01602EPSS
SaveExploits0References1
CVE-2002-0370: Undefined Security Weakness
Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including 1 Microsoft Windows 98 with Plus! Pack, 2 Windows XP, 3 Windows ME, 4 Lotus Notes R4 through R...
7.5CVSS6.4AI score0.43298EPSS
SaveExploits0References1
20