CVE-2020-24175

Katalog CVE

CVSS 7.8 · High EPSS 1,8%

Kerentanan Out-of-bounds Write pada yz1. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.

Rincian

Terbit di NVD

22 Februari 2021

Terakhir diubah

9 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/illikainen/315a420a9c28cbe882e16b8eba40b2e1 exploit · advisory pihak ketiga
• https://gist.github.com/illikainen/ced14e08e00747fef613ba619bb25bb4 exploit · advisory pihak ketiga
• https://illikainen.dev/advisories/014-yz1-izarc exploit · advisory pihak ketiga