GCVE - cpe:2.3:a:nih:libzip:0.10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nih:libzip:0.10:*:*:*:*:*:*:*

part: a version: 0.10 update: *

Vendor	Nih (`dc2cde8a-b090-5b02-b6c6-53f5b9eeaba3`)
Product	Libzip (`e1e60b45-28ae-5f4f-8b09-a618bcbeb251`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/libzip`	purl2cpe	2026-06-01 10:10:55.393235
`pkg:deb/ubuntu/libzip`	purl2cpe	2026-06-01 10:10:55.393237
`pkg:github/nih-at/libzip`	purl2cpe	2026-06-01 10:10:55.393239
`pkg:nuget/libzip`	purl2cpe	2026-06-01 10:10:55.393241
`pkg:rpm/centos/libzip`	purl2cpe	2026-06-01 10:10:55.393243
`pkg:rpm/fedora/libzip`	purl2cpe	2026-06-01 10:10:55.393246
`pkg:rpm/opensuse/libzip`	purl2cpe	2026-06-01 10:10:55.393248

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1163`	vulnerable	2026-06-08 05:00:47.888959	Details available Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak. Published: 2012-07-12T20:00:00.000Z Updated: 2024-09-17T00:26:22.595Z Open on db.gcve.eu Reference links http://nih.at/listarchive/libzip-discuss/msg00252.html http://www.openwall.com/lists/oss-security/2012/03/21/2 http://www.mandriva.com/security/advisories?name=MDVSA-2012:034 http://www.nih.at/libzip/NEWS.html http://www.openwall.com/lists/oss-security/2012/03/29/11	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1162`	vulnerable	2026-06-08 05:00:47.888494	Details available Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct." Published: 2012-07-12T20:00:00.000Z Updated: 2024-09-16T20:37:08.613Z Open on db.gcve.eu Reference links http://nih.at/listarchive/libzip-discuss/msg00252.html http://www.openwall.com/lists/oss-security/2012/03/21/2 http://www.mandriva.com/security/advisories?name=MDVSA-2012:034 http://www.nih.at/libzip/NEWS.html http://www.openwall.com/lists/oss-security/2012/03/29/11	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.