CVE-2014-2720

IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attacks via a modified Central Directory, as demonstrated by unintended code execution prompted by a .jpg extension in the Central Directory and a .exe extension in the local file header.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.xchg.info/?p=418	Exploit
http://www.xchg.info/?p=418	Exploit

Configurations

Configuration 1 (hide)

cpe:2.3:a:izarc:izarc:4.1.8:*:*:*:*:*:*:*

History

21 Nov 2024, 02:06

Type	Values Removed	Values Added
References	~~() http://www.xchg.info/?p=418 - Exploit~~	() http://www.xchg.info/?p=418 - Exploit

Information

Published : 2014-05-27 11:15

Updated : 2024-11-21 02:06

NVD link : CVE-2014-2720

Mitre link : CVE-2014-2720

CVE.ORG link : CVE-2014-2720

JSON object : View

Products Affected

izarc

izarc

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2014-2720", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2014-05-27T11:15:39.140", "references": [{"url": "http://www.xchg.info/?p=418", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.xchg.info/?p=418", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attacks via a modified Central Directory, as demonstrated by unintended code execution prompted by a .jpg extension in the Central Directory and a .exe extension in the local file header."}, {"lang": "es", "value": "IZArc 4.1.8 muestra el nombre de un archivo bas\u00e1ndose en la entrada del directorio central de un archivo ZIP, pero lanza este archivo bas\u00e1ndose en la cabecera de archivo local de un archivo ZIP, lo que permite a atacantes remotos asistidos por usuario realizar ataques de falsificaci\u00f3n de extensi\u00f3n de archivo a trav\u00e9s de un directorio central modificado, tal y como fue demostrado por la ejecuci\u00f3n de c\u00f3digo no intencionada solicitada por una extensi\u00f3n .jpg en el directorio central y una extensi\u00f3n .exe en la cabecera de archivo local."}], "lastModified": "2024-11-21T02:06:49.993", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:izarc:izarc:4.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "835D58E5-EAA2-4A25-8CB4-B2D9C9447F55"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}