Info-Zip Wiz CVE-2013-5659 Write Access Violation Arbitrary Code Execution Vulnerability

Bugtraq ID:	62114
Class:	Design Error
CVE:	CVE-2013-5659
Remote:	Yes
Local:	No
Published:	Apr 16 2013 12:00AM
Updated:	Apr 16 2013 12:00AM
Credit:	Josep Pi Rodriguez, Pedro Guillen Nuñez, Miguel Angel de Castro Simon
Vulnerable:	Info-ZIP Wiz 5.0.3
Not Vulnerable:

Info-Zip Wiz CVE-2013-5659 Write Access Violation Arbitrary Code Execution Vulnerability

Info-Zip Wiz is prone to an arbitrary code-execution vulnerability.

Successfully exploiting this issue can allow attackers to execute arbitrary code within the context of the affected application.

Wiz 5.0.3 is vulnerable; other versions may also be affected.

Info-Zip Wiz CVE-2013-5659 Write Access Violation Arbitrary Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Info-Zip Wiz CVE-2013-5659 Write Access Violation Arbitrary Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Info-Zip Wiz CVE-2013-5659 Write Access Violation Arbitrary Code Execution Vulnerability

References:

• Info-Zip Homepage (Info-Zip)
  
• list of vulnerabilities discovered by realpentesting (Full Disclosure)
  
• User Mode Write Access Violation in Wiz 5.0.3 (Josep Pi Rodriguez, Pedro Guillen Nuñez, Miguel Angel de Castro Simon)