BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Compression Plus and Tumblweed EMF Stack Overflow Aug 31 2006 07:16PM
Michael Hale Ligh (michael ligh mnin org)
The Compression Plus library is designed to handle de/compression of
popular archiving formats such as ARC, ARK, PAK, ARJ, CAB, GZ, LBR, TAR,
TAZ, TGZ, Z, ZIP, and ZOO. The code fails to properly validate input
while processing specially crafted ZOO files, which results in a
stack-based buffer overf...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus