Archive 安全漏洞

Archive is a Dart library for encoding and decoding various archive and compression formats such as Zip, Tar, GZip, ZLib and BZip2. A security vulnerability exists in Archive version v3.3.7, which originates from a vulnerability that allows an attacker to spoof zip filenames, resulting in...

CVE-2023-39137

Archive v3.3.7 contains a vulnerability that allows attackers to spoof ZIP filenames, resulting in inconsistent filename parsing. The CVE entry CVE-2023-39137 is mapped to this issue; the core detail across connected sources is that the vulnerability arises in Archive v3.3.7 and affects parsing o...

CVE-2023-39137

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...

CVE-2023-39139

An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39139

The CVE-2023-39139 entry concerns Archive v3.3.7, where a crafted zip file can trigger a path traversal during extraction. Affected component: Archive library (version 3.3.7). Root cause: path traversal vulnerability in zip extraction. Impact: as per CVSS, high confidentiality, integrity, and ava...

CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

ZIP Foundation 路径遍历漏洞

ZIP Foundation is a library for creating, reading, and modifying ZIP archives from the individual developer Thomas Zoechling of Austria. A security vulnerability exists in ZIP Foundation version v0.9.16, which stems from a vulnerability that allows an attacker to perform path traversal by...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39139

An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39137

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing...

CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39135

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry...

PT-2023-26798 · Unknown · Ziparchive

Name of the Vulnerable Software and Affected Versions: ZipArchive version 2.5.4 Description: The issue is related to an unhandled edge case in the sanitizedPath component of ZipArchive, which allows attackers to cause a Denial of Service DoS by using a crafted zip file. Recommendations: For...

SSZipArchive 安全漏洞

SSZipArchive is ZipArchive open source a simple utility class . Used to compress and uncompress files on iOS, macOS and tvOS. A security vulnerability exists in ZipArchive version v2.5.4, which stems from an unhandled edge case in the component sanitizedPath, allowing an attacker to cause a denia...

Archive 路径遍历漏洞

Archive is a Dart library for encoding and decoding various archive and compression formats such as Zip, Tar, GZip, ZLib and BZip2. A security vulnerability exists in Archive version v3.3.7 that originates from allowing an attacker to perform path traversal by extracting a carefully crafted zip...

CVE-2023-39135

CVE-2023-39135 concerns Zip Swift v2.1.2, where a crafted zip entry can trigger a path traversal, enabling an attacker to access files outside the intended directory. The CVE entry notes a local attack surface with low exploit complexity and requiring user interaction, and the provided metrics li...

CVE-2023-39136

An unhandled edge case in the component sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service DoS via a crafted zip file...

SUSE CVE-2023-31102

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive...

SUSE CVE-2023-40481

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...