VYPR

Unalz

by Unalz

CVEs (2)

  • CVE-2005-3862Nov 29, 2005
    risk 0.05cvss epss 0.20

    Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.

  • CVE-2006-0950Mar 13, 2006
    risk 0.00cvss epss 0.02

    unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename.