PatchTheCVEizarc vulnerabilities and fixes
Recent CVEs affecting izarc, with upgrade or downgrade steps. 2 tracked.
izarc has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-05-27. Highest priority: CVE-2014-2720 (score 50/100).
- CVE-2014-2720 MEDIUM 6.8 DOWNGRADE IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this
- CVE-2010-5235 MEDIUM 6.9 DOWNGRADE Untrusted search path vulnerability in IZArc Archiver 4.1.2 allows local users to gain privileges via a Trojan
FAQ
How do I fix izarc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is izarc being exploited right now?
None of the tracked izarc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which izarc CVE should I patch first?
CVE-2014-2720 currently ranks highest (50/100): IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this .