OSVDB ID: 24895 Title: IZArc Multiple Archive Traversal Arbitrary File Write |
Info |
|
|
Dates |
||||
|
|
Description |
IZArc contains a flaw that allows a remote attacker to extract files to arbitrary locations on the filesystem, possibly overwriting system binaries and other sensitive or confidential information. The issue is due to IZArc not properly sanitizing pathnames for archived files, specifically pathnames that include directory traversal style attacks (../../). |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Rumored |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|