CVE-2004-1010
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2004-1010
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2004-1010.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2004-1010
- Published
- 2005-03-01T05:00:00Z
- Modified
- 2025-04-03T01:03:51Z
- Downstream
- Summary
- [none]
- Details
-
Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.
- References
-
- http://secunia.com/advisories/13094/
- http://security.gentoo.org/glsa/glsa-200411-16.xml
- http://www.debian.org/security/2005/dsa-624
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:141
- http://www.securityfocus.com/bid/11603
- https://bugzilla.fedora.us/show_bug.cgi?id=2255
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html
- http://marc.info/?l=bugtraq&m=109958840611053&w=2
- http://www.ciac.org/ciac/bulletins/p-072.shtml
- http://www.hexview.com/docs/20041103-1.txt
- http://www.info-zip.org/FAQ.html
- http://www.redhat.com/support/errata/RHSA-2004-634.html
- http://www.turbolinux.com/security/2005/TLSA-2005-18.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17956
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9848
- https://usn.ubuntu.com/18-1/
- https://security-tracker.debian.org/tracker/CVE-2004-1010
Affected packages
Debian:11 / zip
Package
- Name
- zip
- Purl
- pkg:deb/debian/zip?arch=source
Debian:12 / zip
Package
- Name
- zip
- Purl
- pkg:deb/debian/zip?arch=source
Debian:13 / zip
Package
- Name
- zip
- Purl
- pkg:deb/debian/zip?arch=source