CVE - CVE-2013-0211

CVE-ID
CVE-2013-0211	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service (crash) via unspecified vectors, which triggers an improper conversion between unsigned and signed types, leading to a buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:58926 URL:http://www.securityfocus.com/bid/58926 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=902998 CONFIRM:https://github.com/libarchive/libarchive/commit/22531545514043e04633e1c015c7540b9de9dbe4 FEDORA:FEDORA-2013-4522 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101876.html FEDORA:FEDORA-2013-4537 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101872.html FEDORA:FEDORA-2013-4576 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101700.html FEDORA:FEDORA-2013-4592 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101687.html FREEBSD:FreeBSD-SA-16:23 URL:https://www.freebsd.org/security/advisories/FreeBSD-SA-16:23.libarchive.asc MANDRIVA:MDVSA-2013:147 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2013:147~~ (Obsolete source) SECTRACK:1035995 URL:http://www.securitytracker.com/id/1035995 SUSE:openSUSE-SU-2015:0568 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00065.html UBUNTU:USN-2549-1 URL:http://www.ubuntu.com/usn/USN-2549-1
Assigning CNA
Red Hat, Inc.
Date Record Created
20121206	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20121206)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)