CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
81.9%
BeZIP provided by Be Graph Co.,Ltd. is a file compression/extraction software supporting ZIP and LZH formats. BeZIP contains a directory traversal vulnerability.
An arbitrary file may be created or altered when extracting a specially crafted file.
Update the software
Update to the latest version according to the information provided by the developer.
Apply a workaround
By applying the following workaround, BeZIP will display the confirmation dialog when extracting a file with the same name.
Disable the following option in [File]-[Options]-[Extract] tab.