NetDefend IPS
IPS Advisories
NetDefend
Anti-Virus
Anti-Virus Advisories
NetDefend Web Content Filtering
NetDefend IP Reputation
NetDefend Update Center
IPS History
May 16, 2024
May 10, 2024
May 09, 2024
May 02, 2024
Apr 25, 2024
Anti-Virus History
Feb 12, 2022
Jan 06, 2022
Oct 23, 2021
Aug 29, 2021
Aug 23, 2021
Home > NetDefend Live > NetDefend IPS Service
NetDefend IPS Service
Print
Advisory ID
48572
Name
Exploit.Perl.Archive.Zip.Arbitrary.File.Overwrite.CVE-2018-10860.A
IPS Signature
Advanced IPS Signature
IPS Group
IPS / GENERIC / MISC
Issued
May 02, 2024
Description
The arbitrary file overwrite vulnerability is due to Archive::Zip module not properly sanitizing paths while extracting zip files. A remote attacker can exploit this vulnerability by enticing a user to request and extract a crafted zip archive by using Perl Archive::Zip module. Successful exploitation could result in arbitrary file overwrite in the target user's system
Enter your details in the box below to receive an email each time we post a new issue of our newsletter.





Click here to unsubscribe


May 20, 2024