Description
Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.
References
- 14925 vdb-entry
- http://secunia.com/secunia_research/2005-45/advisory/
- turbo-searcher-arj-bo(30438) vdb-entry
- ADV-2006-4603 vdb-entry
- 1017261 vdb-entry
- http://www.vuln.sg/turbosearcher330-en.html
- 21208 vdb-entry
- 23004 third-party-advisory
- 16664 third-party-advisory
- 20050923 Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow mailing-list