Acubix PicoZip Archive Directory Traversal Vulnerability

PicoZip is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to extract files into directories of their choosing and overwrite arbitrary files. Successful exploits may aid in further attacks.

This issue affects PicoZip 4.02; other versions may also be affected.


 

Privacy Statement
Copyright 2010, SecurityFocus