vendor:
BlueZone Desktop
by:
Silent Dream
7.8
CVSS
HIGH
Denial of Service
400
CWE
Product Name: BlueZone Desktop
Affected Version From: Latest
Affected Version To: Latest
Patch Exists: No
Related CWE: N/A
CPE: a:rocket_software:bluezone_desktop
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3
2011
BlueZone Desktop Malformed .zap file Local Denial of Service
A maliciously crafted .zap file can cause a denial of service when opened with bzap.exe. The file contains a header of 'BZAP200BK' followed by 20 'A' characters.
Mitigation:
Ensure that all .zap files are from trusted sources and are scanned for malicious content.