CVE-2023-39136

Summary

CVE-2023-39136 is a recently disclosed vulnerability in ZipArchive version 2.5.4. This issue involves an unhandled edge case in the _sanitizedPath component, enabling attackers to trigger a Denial of Service (DoS) through the use of a specially crafted zip file. By exploiting this vulnerability, malicious actors can cause the application to crash or become unresponsive, leading to a disruptive impact on the targeted system or network. Users are encouraged to update to the latest version of ZipArchive to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.