CVE-2012-1162

CVE-2012-1162 describes a heap-based buffer overflow in the _zip_readcdir function of libzip 0.10, affecting applications that use this library. An attacker could exploit this vulnerability by providing a specially crafted zip archive with the number of directories set to zero, leading to a denial of service (application crash) and potentially arbitrary code execution. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.