CVE-2006-2909

Related Files

secunia-zipinfo.txt

Posted Jun 15, 2006

Authored by Tan Chew Keong | Site secunia.com

Secunia Research has discovered a vulnerability in PicoZip version 4.01, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error within the "zipinfo.dll" info tip shell extension when reading a ACE, RAR, or ZIP archive that contains a file with an overly long filename. This can be exploited to cause a stack-based buffer overflow when the user moves the mouse cursor over a malicious archive either in Windows Explorer or from any program that uses the file-open dialog box. Successful exploitation allows arbitrary code execution.

tags | advisory, overflow, arbitrary, shell, code execution

systems | windows

advisories | CVE-2006-2909

SHA-256 | d020df17118c2708ed7b20a03b95d908f801e7b21c0521b16b3d114542da5705

Download | Favorite | View