CVE-2010-1685 - Vulnerability Details - OpenCVE

Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cursorarts	Zipwrangler

Configuration 1 [-]

cpe:2.3:a:cursorarts:zipwrangler:1.20:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/64079
http://secunia.com/advisories/39575
http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow/
https://seclists.org/fulldisclosure/2010/Apr/331

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-05-04T15:00:00Z

Updated: 2024-09-17T01:41:52.140Z

Reserved: 2010-04-30T00:00:00Z

Link: CVE-2010-1685

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2010-05-04T16:00:35.543

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-1685

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cursorarts:zipwrangler:1.20:*:*:*:*:*:*:*", "matchCriteriaId": "8600F4BA-250F-4936-BB49-947759E0A047", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename."}, {"lang": "es", "value": "Desbordamiento de b\u00faffer basado en pila en CursorArts ZipWrangler v1.20, permite a atacantes remotos asistidos por el usuario ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un archivo ZIP que contenga un archivo con un nombre de archivo largo."}], "id": "CVE-2010-1685", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-05-04T16:00:35.543", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/64079"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/39575"}, {"source": "cve@mitre.org", "url": "http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow/"}, {"source": "cve@mitre.org", "url": "https://seclists.org/fulldisclosure/2010/Apr/331"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/64079"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/39575"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-031-zip-wrangler-1-20-buffer-overflow/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://seclists.org/fulldisclosure/2010/Apr/331"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}