|
|
Family: Windows --> Category: infos
WinZip Multiple Overflows Vulnerability Scan
Vulnerability Scan Summary
Acertains the presence of WinZip
Detailed Explanation for this Vulnerability Test
The remote host is using a version of WinZip which is older than
version 9.0-SR1.
WinZip is a popular ZIP compression tool. The remote version of this
software contains several buffer overflows which may allow a possible hacker
to execute arbitrary code on the remote host.
To exploit it, a possible hacker would need to send a malformed archive
file to a user on the remote host and wait for him to open it
using WinZip.
Solution : Upgrade to WinZip 9.0-SR1.
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
