High severity7.8NVD Advisory· Published Aug 19, 2017· Updated Jun 17, 2026

CVE-2017-11323

Description

Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as demonstrated by use of "AUX" as the initial substring of a filename.

Affected products

Estsoft/Alzip2 versions
cpe:2.3:a:estsoft:alzip:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:estsoft:alzip:*:*:*:*:*:*:*:*range: <=8.51
- (no CPE)range: <=8.51

Patches

Vulnerability mechanics

References

exploit.kitploit.com/2017/08/alzip-851-buffer-overflow.htmlnvdExploitThird Party Advisory
www.altools.com/ALTools/ALZip/Version-History.aspxnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000