← Vulnerability feed

Vulnerability record · CVE-2007-2058 · published 18 April 2007

CVE-2007-2058: Picozip vulnerability

PPicozip · Picozip

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive.

6.8 CVSS 2.0 Medium EPSS 1.3% · top 30.7%
6.8CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/24868 Vendor Advisory
http://www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9
http://www.securityfocus.com/bid/23471
http://www.vupen.com/english/advisories/2007/1377
https://exchange.xforce.ibmcloud.com/vulnerabilities/33639
http://secunia.com/advisories/24868 Vendor Advisory
http://www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9
http://www.securityfocus.com/bid/23471
http://www.vupen.com/english/advisories/2007/1377
https://exchange.xforce.ibmcloud.com/vulnerabilities/33639

Track CVE-2007-2058 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2007-1673Amavis vulnerabilityunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a …EPSS 3.2%7.8CVE-2007-2536Picozip vulnerabilityPicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous fi…EPSS 8.5%7.5CVE-2006-2909Picozip vulnerabilityStack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a lon…EPSS 9.0%

Source: NIST National Vulnerability Database (record CVE-2007-2058), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.