CVE-2013-0138

BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...

CVE-2006-2520

Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...