Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attacks via a modified Central Directory, as demonstrated by unintended code execution prompted by a .jpg extension in the Central Directory and a .exe extension in the local file header.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IZArc 代码注入漏洞
Vulnerability Description
IZArc是保加利亚软件开发者Ivan Zahariev所研发的一套用在Microsoft Windows操作系统中的数据压缩软件。 IZArc 4.1.8版本中存在代码注入漏洞。远程攻击者可借助修改的Central Directory项利用该漏洞实施文件扩展欺骗攻击。
CVSS Information
N/A
Vulnerability Type
N/A