• info
• discussion
• exploit
• solution
• references

Trident Software PowerZip ZIP Archive Handling Buffer Overflow Vulnerability

PowerZip is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

This vulnerability allows attackers to execute arbitrary machine code in the context of the affected application.

Versions of PowerZip prior to 7.07 Build 3901 are vulnerable to this issue.