PT-2006-3140 · Cam Unzip+2 · Cam Unzip+2

Tan Chew Keong · Publicado 2006-05-09 · Atualizado 2018-10-18 · CVE-2006-2161

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TZipBuilder version 1.79.03.01 Abakt versions 0.9.2 through 0.9.3-beta1 CAM UnZip versions 4.0 through 4.3

Description The issue allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name, potentially leading to buffer overflow.

Recommendations For TZipBuilder version 1.79.03.01, update to a version that fixes the buffer overflow issue. For Abakt versions 0.9.2 through 0.9.3-beta1, avoid using the affected software to open ZIP archives from untrusted sources until a patch is available. For CAM UnZip versions 4.0 through 4.3, consider disabling the ZIP archive processing feature until a fixed version is released.

Correção

Identificadores relacionados

CVE-2006-2161

Produtos afetados

Abakt

Cam Unzip

Tzipbuilder

Referências · 22

• http://vupen.com/english/advisories/2006/1865 · Nota
• http://secunia.com/advisories/19946 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1687 · Nota
• http://secunia.com/advisories/20068 · Aviso do Fabricante
• http://xs4all.nl/~edienske/abakt/releases.html#0.9.3-RC1 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26275 · Nota
• http://securityfocus.com/archive/1/434520/100/0/threaded · Nota
• http://secunia.com/secunia_research/2006-26/advisory · Aviso do Fabricante
• http://securitytracker.com/id?1016107 · Correção
• http://securityfocus.com/archive/1/433257/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26435 · Nota
• http://secunia.com/advisories/19945 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-2161 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26549 · Nota
• http://vupen.com/english/advisories/2006/1805 · Nota