CVE-2004-1010: Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, all...

Security readout for executives and security teams

CVE-2004-1010 is an old Info-Zip buffer overflow. A malicious ZIP item with an overly long pathname could cause vulnerable Info-Zip 2.3 or possibly earlier versions to run attacker-controlled code during recursive compression workflows. Exposure is most likely on legacy Unix/Linux systems or embedded appliances still carrying Info-Zip 2.3-era packages. Modern maintained distributions are less likely exposed if historical vendor fixes were applied. Treat this as a legacy exposure cleanup item with high impact where present. It should not outrank actively exploited modern issues, but vulnerable old Info-Zip deployments should be removed or updated. Mitigation focus: Inventory systems for Info-Zip zip 2.3 or earlier packages.; Apply relevant vendor security updates from maintained distribution channels.; Restrict vulnerable tools from processing untrusted archives or long pathnames..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.