Unalz

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Unalz records in CISA KEV

No Unalz vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Unalz · all components

TI-2005-03656 CVE-2005-3862 · GHSA-57g3-6qp4-2rm4

MEDIUM 52

Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.20436 Published 2005-11-29 No fix listed

TI-2006-00925 CVE-2006-0950 · GHSA-54g6-7vx7-p9jx

LOW 17

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01709 Published 2006-03-13 No fix listed CWE-22