Description
ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Top Password Software | ZIP Password Recovery | 2.30 | — |
References
- ExploitDB-47894 exploit
- Vendor Homepage product
- VulnCheck Advisory: ZIP Password Recovery 2.30 - 'ZIP File' Denial of Service third-party-advisory