Vulnerabilities > Zziplib Project > Zziplib > 0.13.62

DATE CVE VULNERABILITY TITLE RISK
2018-09-05 CVE-2018-16548 Missing Release of Resource after Effective Lifetime vulnerability in Zziplib Project Zziplib
An issue was discovered in ZZIPlib through 0.13.69.
4.3
2017-03-01 CVE-2017-5981 Reachable Assertion vulnerability in Zziplib Project Zziplib 0.13.62
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5980 NULL Pointer Dereference vulnerability in Zziplib Project Zziplib 0.13.62
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5979 NULL Pointer Dereference vulnerability in Zziplib Project Zziplib 0.13.62
The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5978 Out-of-bounds Read vulnerability in Zziplib Project Zziplib 0.13.62
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5977 Out-of-bounds Read vulnerability in Zziplib Project Zziplib 0.13.62
The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5976 Out-of-bounds Write vulnerability in multiple products
Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5975 Out-of-bounds Write vulnerability in multiple products
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
4.3
2017-03-01 CVE-2017-5974 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.
4.3