GCVE - cpe:2.3:a:picozip:picozip:4.01:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:picozip:picozip:4.01:*:*:*:*:*:*:*

part: a version: 4.01 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2536`	vulnerable	2026-06-08 04:49:45.226883	Details available PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. Published: 2007-05-09T01:00:00.000Z Updated: 2024-08-07T13:42:33.335Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 http://osvdb.org/41751 http://www.securityfocus.com/bid/23823 http://www.securityfocus.com/archive/1/467646/100/0/threaded http://securityreason.com/securityalert/2680	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2909`	vulnerable	2026-06-08 04:49:07.825840	Details available Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive. Published: 2006-06-16T10:00:00.000Z Updated: 2024-08-07T18:06:27.221Z Open on db.gcve.eu Reference links http://www.osvdb.org/26447 http://securityreason.com/securityalert/1104 http://www.securityfocus.com/bid/18425 http://secunia.com/advisories/20481 http://www.securityfocus.com/archive/1/437450/100/100/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.