CVE-2010-1686

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in (1) Urgent Backup 3.20, and (2) ABC Backup Pro 5.20 and ABC Backup 5.50, allows user-assisted remote attackers to execute arbitrary code via a crafted ZIP archive.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/39699Vendor Advisory
http://secunia.com/advisories/39701Vendor Advisory
http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034
http://www.vupen.com/english/advisories/2010/1046Vendor Advisory
http://www.vupen.com/english/advisories/2010/1047Vendor Advisory
http://secunia.com/advisories/39699Vendor Advisory
http://secunia.com/advisories/39701Vendor Advisory
http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034
http://www.vupen.com/english/advisories/2010/1046Vendor Advisory
http://www.vupen.com/english/advisories/2010/1047Vendor Advisory

Timeline

Published: May 5, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-16875.0Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash) and possibly execut CVE-2010-16889.3Stack-based buffer overflow in 2BrightSparks SyncBack Freeware 3.2.20.0, and possibly other versions before 3.2.21, allows user-assisted rem CVE-2010-16896.4The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Se CVE-2010-16906.4The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Se CVE-2010-16936.3openibd in OpenFabrics Enterprise Distribution (OFED) 1.5.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp CVE-2010-17017.5SQL injection vulnerability in browse.html in PHP Video Battle Script allows remote attackers to execute arbitrary SQL commands via the cat CVE-2010-17027.5SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute arbitrary SQL commands CVE-2010-17034.3Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers t CVE-2010-17047.5Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arbitrary SQL commands CVE-2010-17057.5SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum paramet CVE-2010-17067.5Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (CVE-2010-17074.3Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary w