CVE-2018-16302

HIGH

MediaComm Zip-n-Go < 4.95 - Buffer Overflow via Crafted File

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-16302. PoCs published by Hashim Jawad.

AI-analyzed exploit summary This exploit targets a local buffer overflow (SEH) in Zip-n-Go v4.9 by crafting a malicious ZIP file with an overly long filename. The payload includes shellcode generated by msfvenom for a bind shell, demonstrating remote code execution (RCE).

Description

MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a crafted file.

Exploits (1)

exploitdb WORKING POC

by Hashim Jawad · pythonlocalwindows

https://www.exploit-db.com/exploits/44828

View Code ZIP pw:eip

This exploit targets a local buffer overflow (SEH) in Zip-n-Go v4.9 by crafting a malicious ZIP file with an overly long filename. The payload includes shellcode generated by msfvenom for a bind shell, demonstrating remote code execution (RCE).

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Zip-n-Go v4.9

No auth needed

Prerequisites: Victim must open the malicious ZIP file in Zip-n-Go v4.9

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/44828/

Scores

CVSS v3 7.8

EPSS 0.0432

EPSS Percentile 89.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (1)

mc1soft/zip-n-go < 4.95

Published Sep 01, 2018

Tracked Since Feb 18, 2026