CVE-2011-2725

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. dot dot sequences in a zip file...

kdeutils4 -- Directory traversal vulnerability

Tim Brown from Nth Dimention reports: I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of th...

Real Networks Netzip Classic 7.5.1 86 File Parsing Buffer Overflow Vulnerability

This module exploits a stack-based buffer overflow vulnerability in version 7.5.1 86 of Real Networks Netzip Classic. In order for the command to be executed, an attacker must convince someone to load a specially crafted zip file with NetZip Classic. By doing so, an attacker can execute arbitrary...

Real Networks Netzip Classic 7.5.1 86 - File Parsing Buffer Overflow (Metasploit)

$Id: realnetworksnetzipbof.rb 13952 2011-10-16 15:47:04Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerability

This module exploits a stack-based buffer overflow vulnerability in the latest version 3.5 of TugZip archiving utility. In order to trigger the vulnerability, an attacker must convince someone to load a specially crafted zip file with TugZip by double click or file open. By doing so, an attacker...

ScadaTEC ScadaPhone Stack Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in version 5.3.11.1230 of scadaTEC's ScadaPhone. In order for the command to be executed, an attacker must convince someone to load a specially crafted project zip file with ScadaPhone. By doing so, an attacker can execute arbitrary...

ScadaTEC ModbusTagServer ScadaPhone - .zip Local Buffer Overflow

ScadaTEC ModbusTagServer ScadaPhone - .zip Local Buffer Overflow mrme@neptune scadatec$ php zip.php -t modbustagserver mrme@neptune scadatec$ nc -v 192.168.114.141 4444 Connection to 192.168.114.141 4444 port tcp/krb524 succeeded! Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001...

ScadaTEC ModbusTagServer & ScadaPhone (.zip) Buffer Overflow (0day)

Exploit for windows platform in category local exploits email protected scadatec$ php zip.php -t modbustagserver email protected scadatec$ nc -v 192.168.114.141 4444 Connection to 192.168.114.141 4444 port tcp/krb524 succeeded! Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft...

ZipX For Windows 1.71 Buffer Overflow

!/usr/bin/perl +Exploit Title: ZipX for Windows v1.71 ZIP File Buffer Overflow Exploit +Date: 05\09\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipX/3000-22504-10518937.html +Version: v1.71 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A Reproduce: Open the zip file,...

ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3...

ZipItFast 3.0 - .zip Heap Overflow

ZipItFast 3.0 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: ZipItFast v3.0 .ZIP File Heap Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipItFast---Zip-It-Free-Vprogram22803.html +Version: v3.0 +Tested On: WIN-XP SP3 Brazilian Portugue...

ZipGenius 6.3.2.3000 - .zip Local Buffer Overflow

ZipGenius 6.3.2.3000 - .zip Local Buffer Overflow !/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP SP3...

1ClickUnzip 3.00 - '.zip' Heap Overflow

!/usr/bin/perl +Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability +Date: 05\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html +Version: 3.0.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; u...

1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability +Date: 05\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html +Version: 3.0.0 +Tested On: WIN-...

eZip Wizard 3.0 Stack Buffer Overflow

Exploit for windows platform in category local exploits $Id: ezipwizardbof.rb 12428 2011-04-25 01:06:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

eZip Wizard 3.0 - Local Stack Buffer Overflow (Metasploit)

$Id: ezipwizardbof.rb 12428 2011-04-25 01:06:34Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Vallen Zipper V2.30 .ZIP File Heap Overflow

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use...

MikeyZip 1.1 ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: MikeyZip 1.1 .ZIP File Buffer Overflow +Date: 10\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/get/Compression-tools/MikeyZip.shtml +Version: 1.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my $filename =...

Vallen Zipper 2.30 - .zip Heap Overflow

Vallen Zipper 2.30 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use...

KLA10402 ACE vulnerability in Vallen Zipper

A heap overflow was found in Vallen Zipper. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZIP file. Original advisories Xforce advisory Related products Vallen-Zipper CVE list KB list Solution...