CVE-2012-5171

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-11-08 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file.

Affected products

Be-Graph Bezip: through 3.04; 3.00, 3.02, 3.03

References

http://jvn.jp/en/jp/JVN18223913/995378/index.html
http://jvn.jp/en/jp/JVN18223913/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000101
http://www.be-graph.com/bgi/product/bezip/secure1.html#en
http://www.securityfocus.com/bid/56488
https://exchange.xforce.ibmcloud.com/vulnerabilities/79916
http://jvn.jp/en/jp/JVN18223913/995378/index.html
http://jvn.jp/en/jp/JVN18223913/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000101
http://www.be-graph.com/bgi/product/bezip/secure1.html#en
http://www.securityfocus.com/bid/56488
https://exchange.xforce.ibmcloud.com/vulnerabilities/79916

Get alerted when CVE-2012-5171 or the next vulnerability affects your stack