AOH :: HP Unsorted C :: B06-4523.HTM

Compression Plus and Tumblweed EMF Stack Overflow



Compression Plus and Tumblweed EMF Stack Overflow
Compression Plus and Tumblweed EMF Stack Overflow



The Compression Plus library is designed to handle de/compression of
popular archiving formats such as ARC, ARK, PAK, ARJ, CAB, GZ, LBR, TAR,
TAZ, TGZ, Z, ZIP, and ZOO. The code fails to properly validate input
while processing specially crafted ZOO files, which results in a
stack-based buffer overflow. Software products that implement the
Compression Plus library are vulnerable to local or remote code
execution, depending on the nature of the calling process.

Details are available from the following URL:

http://www.mnin.org/advisories/2006_cp5_tweed.pdf 


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.