KLA10059 ACE vulnerability in ALZip

A buffer overflow vulnerability was found in the ALZip. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited at a point related to unknown vectors via a specially designed MIM file.

Original advisories

ALTools bulletin [JP]

Related products

ALZip

CVE list

CVE-2011-1336 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Estsoft ALzip 8 versions 8.21 and earlier