An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.
References
| Link | Resource |
|---|---|
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889270 | Exploit Issue Tracking Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1056 | Issue Tracking Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2018/02/msg00016.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2019/03/msg00004.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/12/msg00034.html | Mailing List Third Party Advisory |
| https://sourceforge.net/p/advancemame/bugs/259/ | Issue Tracking Third Party Advisory |
| https://usn.ubuntu.com/3570-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Jan 2022, 14:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/12/msg00034.html - Mailing List, Third Party Advisory |
30 Dec 2021, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2018-07-27 18:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-1056
Mitre link : CVE-2018-1056
CVE.ORG link : CVE-2018-1056
JSON object : View
Products Affected
debian
- debian_linux
advancemame
- advancecomp
canonical
- ubuntu_linux