ID CVE-2013-0138
Summary BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ZIP archive.
References
Vulnerable Configurations
  • cpe:2.3:a:bitberry_software:bitzipper:*:*:*:*:*:*:*:*
    cpe:2.3:a:bitberry_software:bitzipper:*:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 22-04-2013 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
cert-vn VU#880916
confirm http://www.kb.cert.org/vuls/id/BLUU-95GP23
Last major update 22-04-2013 - 04:00
Published 22-04-2013 - 03:27
Last modified 22-04-2013 - 04:00
Back to Top