Read the docs

ESTsoft

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

ESTsoft records in CISA KEV

No ESTsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Alzip · all components

TI-2018-03755 CVE-2018-5196 · GHSA-35h6-9g28-r76q

Alzip Stack Overflow Vulnerability

Priority MEDIUM 41

Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01439 Published 2018-12-21 No fix listed CWE-787
TI-2019-09589 CVE-2019-12807 · GHSA-mvg2-vvvh-fw8f

Memory corruption in ESTsoft ALZIP

Priority LOW 37

Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0162 Published 2019-08-13 No fix listed CWE-119
Priority LOW 34

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Cod…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00424 Published 2018-05-17 No fix listed CWE-426
Open these records in search →