CVE-2007-2536

Published: May 9, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

Affected (2)

Products: Picozip: Picozip

Picozip

1 product

Picozip

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Picozip Picozip	Version 4.01
Picozip Picozip	Version 4.02

References (10)

http://osvdb.org/41751

Source: cve@mitre.org

http://securityreason.com/securityalert/2680

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/467646/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23823

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/34080

Source: cve@mitre.org

http://osvdb.org/41751