Headline
CVE-2018-1056: AdvanceMAME / Bugs / #259 CVE-2018-1056: heap buffer overflow while running advzip
An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.
#259 CVE-2018-1056: heap buffer overflow while running advzip
Status: closed-fixed
Owner: nobody
Labels: None
Priority: 5
Updated: 2018-02-12
Created: 2018-02-10
Private: No
Hello,
Debian received a bug report about a heap-based buffer overflow in advzip.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889270
The bug reporter also submitted a POC attached to this bug report. This issue has a possible security impact and CVE-2018-1056 was assigned to it.
Discussion
Thanks for the report.
It’s fixed in the just released v2.1
Ciao,
Andrae
- status: open --> closed-fixed
Log in to post a comment.