Description
Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name.
References
- http://secunia.com/secunia_research/2006-26/advisory
- 20060508 Secunia Research: TZipBuilder ZIP File Handling Buffer OverflowVulnerability mailing-list
- ADV-2006-1687 vdb-entry
- 17880 vdb-entry
- ADV-2006-1865 vdb-entry
- abakt-zip-bo(26435) vdb-entry
- 19945 third-party-advisory
- 1016107 vdb-entry
- 853 third-party-advisory
- 20068 third-party-advisory
- 19946 third-party-advisory
- http://secunia.com/secunia_research/2006-31/advisory/
- 1016064 vdb-entry
- tzipbuilder-zip-bo(26275) vdb-entry
- 20060515 Secunia Research: Abakt ZIP File Handling Buffer mailing-list
- ADV-2006-1805 vdb-entry
- camunzip-archive-bo(26549) vdb-entry
- 20060519 Secunia Research: CAM UnZip ZIP File Handling Buffer OverflowVulnerability mailing-list
- http://www.xs4all.nl/~edienske/abakt/releases.html#0.9.3-RC1
- http://secunia.com/secunia_research/2006-34/advisory/
- 20060515 Secunia Research: Abakt ZIP File Handling Buffer OverflowVulnerability mailing-list