PT-2006-3140 · Cam Unzip+2 · Cam Unzip+2

Tan Chew Keong · Published 2006-05-09 · Updated 2018-10-18 · CVE-2006-2161

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TZipBuilder version 1.79.03.01 Abakt versions 0.9.2 through 0.9.3-beta1 CAM UnZip versions 4.0 through 4.3

Description The issue allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name, potentially leading to buffer overflow.

Recommendations For TZipBuilder version 1.79.03.01, update to a version that fixes the buffer overflow issue. For Abakt versions 0.9.2 through 0.9.3-beta1, avoid using the affected software to open ZIP archives from untrusted sources until a patch is available. For CAM UnZip versions 4.0 through 4.3, consider disabling the ZIP archive processing feature until a fixed version is released.

Fix

Related Identifiers

CVE-2006-2161

Affected Products

Abakt

Cam Unzip

Tzipbuilder

References · 22

• http://secunia.com/advisories/19946 · Vendor Advisory
• http://secunia.com/advisories/20068 · Vendor Advisory
• http://secunia.com/secunia_research/2006-26/advisory · Vendor Advisory
• http://securitytracker.com/id?1016107 · Patch
• http://secunia.com/advisories/19945 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2161 · Security Note
• http://securityfocus.com/bid/17880 · Patch
• http://secunia.com/secunia_research/2006-34/advisory · Vendor Advisory
• http://securitytracker.com/id?1016064 · Patch
• http://secunia.com/secunia_research/2006-31/advisory · Vendor Advisory
• http://vupen.com/english/advisories/2006/1865 · Note
• http://vupen.com/english/advisories/2006/1687 · Note
• http://xs4all.nl/~edienske/abakt/releases.html#0.9.3-RC1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26275 · Note
• http://securityfocus.com/archive/1/434520/100/0/threaded · Note