Zoo · Zoo · CVE-2006-0855
**Name of the Vulnerable Software and Affected Versions**
zoo versions 2.10 and earlier
**Description**
The issue is related to a stack-based buffer overflow in the fullpath function, which can be exploited by user-assisted attackers using a crafted ZOO file. This can cause the combine function to return a longer string than expected, potentially allowing the execution of arbitrary code.
**Recommendations**
For zoo versions 2.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.