SB2011070702 - Buffer overflow in ESTSoft ALZip

Description

This security bulletin contains information about 1 vulnerability.

1) Buffer overflow (CVE-ID: CVE-2011-1336)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Buffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.

Remediation

Install update from vendor's website.

References

• http://jvn.jp/en/jp/JVN01547302/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000048
• http://secunia.com/advisories/45108
• http://www.altools.jp/download.aspx
• http://www.altools.jp/ETC/NEWS.aspx?mid=231&vidx=118
• http://www.securityfocus.com/bid/48493