Skip to content
Noroxi

unalz records

2 published records for vendor unalz.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    All records

    2 records
    • CVE-2005-3862
      36Monitor

      Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.

      HighCVSS 7.5Proof of conceptEPSS 20%

      unalz · unalzNov 29, 2005

    • CVE-2006-0950
      11Monitor

      unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename.

      LowCVSS 2.6No exploitEPSS 1%

      unalz · unalzMar 13, 2006