Description
A remote code execution vulnerability due to incomplete check for 'xheader_decode_path_record' function's parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bandisoft International | Bandizip | unspecified – ≤ 7.19 | — |