A local overflow exists in Zip 2.3. Zip fails to properly perform recursive folder compression for long paths resulting in a buffer overflow. With a specially crafted path, an attacker can possibly execute arbitrary code resulting in a loss of integrity.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified
Solution
It has been reported that this issue has been fixed. Upgrade to version 2.31, or higher, to address this vulnerability.
