GCVE - cpe:2.3:a:picozip:picozip:4.02:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:picozip:picozip:4.02:*:*:*:*:*:*:*

part: a version: 4.02 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2536`	vulnerable	2026-06-08 04:49:45.226929	Details available PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file. Published: 2007-05-09T01:00:00.000Z Updated: 2024-08-07T13:42:33.335Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/34080 http://osvdb.org/41751 http://www.securityfocus.com/bid/23823 http://www.securityfocus.com/archive/1/467646/100/0/threaded http://securityreason.com/securityalert/2680	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2058`	vulnerable	2026-06-08 04:49:44.093010	Details available Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive. Published: 2007-04-18T02:20:00.000Z Updated: 2024-08-07T13:23:49.947Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/23471 http://www.vupen.com/english/advisories/2007/1377 https://exchange.xforce.ibmcloud.com/vulnerabilities/33639 http://www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9 http://secunia.com/advisories/24868	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.