CVE-2008-4779: Tguzip

High severity, CVSS 10.0. EPSS: 64.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary code via a long filename in a .zip file.

Affected products

• Tguzip Tguzip: version 3.5.5.0.0 only

Published 2008-10-29. Last modified 2026-06-16.