CVE-2018-5196: Estsoft Alzip

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Alzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted LZH archive file, a attacker could execute arbitrary code execution.

Affected products

• Estsoft Alzip: up to and including 10.76.0.0

Published 2018-12-21. Last modified 2026-06-17.