Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.
Date: 2010-05
Affected: cursorarts/zipwrangler
Attack vector: rce
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2010-1685
CWE: CWE-119
CVSS: 9.3 ()

Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.


Mitigations:

Architectural layers (MAESTRO):