1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Attack: eZip Wizard Zip File BO

Attack: eZip Wizard Zip File BO

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.

Description

This signature detects attempts to exploit a buffer overflow vulnerability in eZip Wizard which could result in remote code execution.

Additional Information

eZip Wizard is a file extractor for Microsoft Windows.

The application is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The vulnerability occurs when handling specially crafted ZIP files.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition.

Affected

  • eZip Wizard 3.0 is vulnerable; other versions may also be affected.
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube