PentaWare PentaZip Multiple Vulnerabilities

Bugtraq ID:	22104
Class:	Unknown
CVE:	CVE-2006-5963 CVE-2006-5964
Remote:	Yes
Local:	No
Published:	Jan 18 2007 12:00AM
Updated:	Jan 26 2007 10:19PM
Credit:	Discovered by JJ Reyes, Secunia Research.
Vulnerable:	PentaWare PentaZip 8.5.1.190 PentaWare PentaSuite-PRO 8.5.1.221
Not Vulnerable:	PentaWare PentaZip 8.5.1 .232 PentaWare PentaSuite-PRO 8.5.1 .232

PentaWare PentaZip Multiple Vulnerabilities

PentaZip is prone to multiple vulnerabilities.

Successful exploitation of these issues may allow remote attackers to execute arbitrary code to gain unauthorized access to a vulnerable computer or deny service to legitimate users by triggering crashes.

PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 are reported affected; other versions may be affected as well.

PentaWare PentaZip Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

PentaWare PentaZip Multiple Vulnerabilities

Solution:
The vendor has released updates to address these issues. Please contact the vendor for details on obtaining and applying the appropriate updates.

PentaWare PentaZip Multiple Vulnerabilities

References:

• Home Page (PentaWare)
  
• PentaZip Archive Handling Vulnerabilities (Secunia)