Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:izarc:izarc:4.1.8:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2014-2720 |
IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attacks via a modified Central Directory, as demonstrated by unintended code execution prompted by a .jpg extension in the Central Directory and a .exe extension in the local file header. Published: May 27, 2014; 7:15:39 AM -0400 |
V4.0:(not available) V3.x:(not available) V2.0: 6.8 MEDIUM |