Libarchive zip zip_read_mac_metadata Code Execution Vulnerability(CVE-2016-1541)

SUMMARY An exploitable heap overflow vulnerability exists in the zip archive decompression functionality of libarchive. A specially crafted zip file can cause memory corruption leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS libarchi...

libarchive: zip_read_mac_metadata() heap-based buffer overflow

A vulnerability was found in libarchive. A specially crafted zip file can provide an incorrect compressed size, which may allow an attacker to place arbitrary code on the heap and execute it in the context of the application...

ALPINE-CVE-2016-1541

Heap-based buffer overflow in the zipreadmacmetadata function in archivereadsupportformatzip.c in libarchive before 3.2.0 allows remote attackers to execute arbitrary code via crafted entry-size values in a ZIP archive...

PT-2016-1812

Name of the Vulnerable Software and Affected Versions libarchive versions prior to 3.2.0 Description The issue is related to a heap-based buffer overflow in the zip read mac metadata function, which can be exploited by remote attackers via crafted entry-size values in a ZIP archive. This can allo...

Libarchive zip zip_read_mac_metadata Code Execution Vulnerability

SUMMARY An exploitable heap overflow vulnerability exists in the zip archive decompression functionality of libarchive. A specially crafted zip file can cause memory corruption leading to code execution. An attacker can send a malformed file to trigger this vulnerability. TESTED VERSIONS libarchi...