libzip: multiple vulnerabilities
| Package(s): | libzip | CVE #(s): | CVE-2012-1162 CVE-2012-1163 | ||||||||||||
| Created: | March 23, 2012 | Updated: | March 29, 2012 | ||||||||||||
| Description: | From the Mandriva advisory:
libzip (version <= 0.10) uses an incorrect loop construct, which can result in a heap overflow on corrupted zip files (CVE-2012-1162). libzip (version <= 0.10) has a numeric overflow condition, which, for example, results in improper restrictions of operations within the bounds of a memory buffer (e.g., allowing information leaks) (CVE-2012-1163). | ||||||||||||||
| Alerts: |
| ||||||||||||||