----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer Wanted!

Want to work with IDA and BinDiff?
Want to write PoC's and Exploits?

Your nationality is not important.
We will get you a work permit, find an apartment, and offer a
relocation compensation package.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA21199

VERIFY ADVISORY:
http://secunia.com/advisories/21199/

CRITICAL:
Less critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
PowerArchiver 2000 5.x
http://secunia.com/product/7501/
PowerArchiver 2001 6.x
http://secunia.com/product/7500/
PowerArchiver 2001 7.x
http://secunia.com/product/10025/
PowerArchiver 2002 8.x
http://secunia.com/product/2201/
PowerArchiver 2003 8.x
http://secunia.com/product/2202/
PowerArchiver 2004 9.x
http://secunia.com/product/5756/
PowerArchiver 2006
http://secunia.com/product/7912/

DESCRIPTION:
Tan Chew Keong has reported a vulnerability in PowerArchiver, which
can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to boundary errors when adding files
to a ZIP archive and can be exploited to cause a stack-based buffer
overflow when a file is added to a ZIP archive containing a file with
an overly long filename.

Successful exploitation allows execution of arbitrary code, but
requires that the user attempts to add a file to the malicious
archive.

The vulnerability has been reported in version 9.62.03. Other
versions may also be affected.

SOLUTION:
Update to version 9.63.
http://www.powerarchiver.com/download/

PROVIDED AND/OR DISCOVERED BY:
Tan Chew Keong

ORIGINAL ADVISORY:
http://vuln.sg/powarc962-en.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------