CVE-2018-1056

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jul 27, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-105619.8An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the CVE-2018-105629.8An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to CVE-2018-105636.1An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).CVE-2018-105646.1XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.CVE-2018-105656.1XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.CVE-2018-105666.1XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.CVE-2018-105676.1XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.CVE-2018-105686.1XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.CVE-2018-105696.1An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field.CVE-2018-10578.8On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LD CVE-2018-105704.8Frog CMS 0.9.5 has XSS in /install/index.php via the ['config']['admin_username'] field.CVE-2018-105716.1Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script