Vulnerability in Picozip

CVE-2007-2536

PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

EPSS: 0.085 (94.5th percentile) — read the EPSS interpretation.

Affected products

  • Picozip — versions 4.01, 4.02
  • N/a — versions n/a

References