Download
| Alert*
[3.4] libarchive: heap-based buffer overflow due to improper input validation (CVE-2016-1541)
A crafted zip file can provide an incorrect compressed size, which may allow an attacker to place arbitrary code on the heap and execute it in the context of the current user. The user must be coerced into unzipping the crafted zip file. Fixed In Version: libarchive 3.2.0
|