Vulnerabilities > CVE-2022-24615 - Improper Handling of Exceptional Conditions vulnerability in Zip4J Project Zip4J

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

zip4j-project

CWE-755

NVD

Published: 2022-02-24

Updated: 2022-04-19

Summary

zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.

Vulnerable Configurations

Part	Description	Count
Application	Zip4J_Project Zip4J Project Zip4J - Zip4J Project Zip4J 1.0 Zip4J Project Zip4J 1.0.1 Zip4J Project Zip4J 1.0.2 Zip4J Project Zip4J 1.0.3 Zip4J Project Zip4J 1.0.4 Zip4J Project Zip4J 1.0.5 Zip4J Project Zip4J 1.0.6 Zip4J Project Zip4J 1.0.7 Zip4J Project Zip4J 1.0.8 Zip4J Project Zip4J 1.1.0 Zip4J Project Zip4J 1.1.1 Zip4J Project Zip4J 1.1.2 Zip4J Project Zip4J 1.1.3 Zip4J Project Zip4J 1.1.4 Zip4J Project Zip4J 1.1.5 Zip4J Project Zip4J 1.1.6 Zip4J Project Zip4J 1.1.7 Zip4J Project Zip4J 1.1.8 Zip4J Project Zip4J 1.1.9 Zip4J Project Zip4J 1.2.0 Zip4J Project Zip4J 1.2.1 Zip4J Project Zip4J 1.2.2 Zip4J Project Zip4J 1.2.3 Zip4J Project Zip4J 1.2.4 Zip4J Project Zip4J 1.2.5 Zip4J Project Zip4J 1.2.6 Zip4J Project Zip4J 1.2.7 Zip4J Project Zip4J 1.2.8 Zip4J Project Zip4J 1.2.9 Zip4J Project Zip4J 1.3.0 Zip4J Project Zip4J 1.3.1 Zip4J Project Zip4J 1.3.2 Zip4J Project Zip4J 1.3.3 Zip4J Project Zip4J 2.0 Zip4J Project Zip4J 2.0.1 Zip4J Project Zip4J 2.0.2 Zip4J Project Zip4J 2.0.3 Zip4J Project Zip4J 2.1.0 Zip4J Project Zip4J 2.1.2 Zip4J Project Zip4J 2.1.3 Zip4J Project Zip4J 2.1.4 Zip4J Project Zip4J 2.2.1 Zip4J Project Zip4J 2.2.2 Zip4J Project Zip4J 2.2.3 Zip4J Project Zip4J 2.2.4 Zip4J Project Zip4J 2.2.5 Zip4J Project Zip4J 2.2.6 Zip4J Project Zip4J 2.2.7 Zip4J Project Zip4J 2.2.8 Zip4J Project Zip4J 2.3.0 Zip4J Project Zip4J 2.3.1 Zip4J Project Zip4J 2.3.2 Zip4J Project Zip4J 2.4.0 Zip4J Project Zip4J 2.5.0 Zip4J Project Zip4J 2.5.1 Zip4J Project Zip4J 2.5.2 Zip4J Project Zip4J 2.6.0 Zip4J Project Zip4J 2.6.1 Zip4J Project Zip4J 2.6.2 Zip4J Project Zip4J 2.6.3 Zip4J Project Zip4J 2.6.4 Zip4J Project Zip4J 2.7.0 Zip4J Project Zip4J 2.8.0 Zip4J Project Zip4J 2.9.0 Zip4J Project Zip4J 2.9.1	66

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References