[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

MDVSA-2012:034 -- Mandriva libzip

ID: oval:org.secpod.oval:def:1300047Date: (C)2013-04-08   (M)2022-10-10
Class: PATCHFamily: unix




Multiple vulnerabilities has been found and corrected in libzip: libzip uses an incorrect loop construct, which can result in a heap overflow on corrupted zip files . libzip has a numeric overflow condition, which, for example, results in improper restrictions of operations within the bounds of a memory buffer . The updated packages have been upgraded to the 0.10.1 version to correct these issues.

Platform:
Mandriva Enterprise Server 5.2
Product:
libzip
Reference:
MDVSA-2012:034
CVE-2012-1163
CVE-2012-1162
CVE    2
CVE-2012-1163
CVE-2012-1162
CPE    1
cpe:/o:mandriva:enterprise_server:5.2

© SecPod Technologies