description: zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker could exploit this to execute arbitrary code in the context of another user.
problem types: CWE-120->CWE-121
affected:
{
product: zsh
vendor: zsh
versions:
status: affected, version: through 5.4.2
}