CVE-2018-16518

2022-10-0316:22:11

mitre

www.cve.org

directory traversal

remote code execution

prim'x zed!

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

JSON

A directory traversal vulnerability with remote code execution in Prim’X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user’s workstation using crafted ZED! containers because the watermark loading function can place an executable file into a Startup folder.

References

github.com/ponypot/cve/blob/master/zed_watermarkExtension.pdf