header-logo
Suggest Exploit
vendor:
Zip-n-Go
by:
Hashim Jawad
7.8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Zip-n-Go
Affected Version From: 4.9
Affected Version To: 4.9
Patch Exists: YES
Related CWE: N/A
CPE: a:mc1_software:zip-n-go
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: Windows 7 Enterprise - SP1 (x86)
2018

Zip-n-Go v4.9 – Local Buffer Overflow (SEH)

Zip-n-Go v4.9 is vulnerable to a local buffer overflow vulnerability when a specially crafted malicious file is opened. This can be exploited to execute arbitrary code by overwriting the SEH handler with a malicious payload.

Mitigation:

Upgrade to the latest version of Zip-n-Go v4.95
Source

Exploit-DB raw data: