vendor:
Zip-n-Go
by:
Hashim Jawad
7.8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Zip-n-Go
Affected Version From: 4.9
Affected Version To: 4.9
Patch Exists: YES
Related CWE: N/A
CPE: a:mc1_software:zip-n-go
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 7 Enterprise - SP1 (x86)
2018
Zip-n-Go v4.9 – Local Buffer Overflow (SEH)
Zip-n-Go v4.9 is vulnerable to a local buffer overflow vulnerability when a specially crafted malicious file is opened. This can be exploited to execute arbitrary code by overwriting the SEH handler with a malicious payload.
Mitigation:
Upgrade to the latest version of Zip-n-Go v4.95