Vulnerabilities

TI-2014-02177 CVE-2014-2720 · GHSA-9hq8-hvqw-5h33

IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory…

LOW 34

IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02305 Published 2014-05-27 No fix listed CWE-94

TI-2010-04933 CVE-2010-5235 · GHSA-h535-jvfp-fv5w

Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain…

LOW 31

Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain privileges via a Trojan horse ztv7z.dll file in the current working directory, as demonstrated by a directory that contains a .arj fi…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00399 Published 2012-09-07 No fix listed

Vulnerabilities

Filters

IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory…

Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain…