MSFN Forum: Security Flaw in Zip files - MSFN Forum

Jump to content



Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Security Flaw in Zip files Rate Topic: -----

#1 User is offline   piaqt 

  • MSFN DIVA
  • PipPipPipPipPip
  • Group: Members
  • Posts: 790
  • Joined: 07-October 01

Posted 18 October 2002 - 12:48 PM

<img src=topics/virus.jpg align=right>Antivirus scanners can be conned by ZIP files with excessively long names. And the code that makes it possible has been copied and incorporated by seemingly every big-name software company under the sun--not to mention its widespread use in security product update services.

This vulnerability was discovered by Mark Tesla and Chad Loder of Rapid7, a security software and consulting company that has created ZIP files that test how well different products deal with the long filenames the ZIP specification allows--and the news isn't encouraging.
Source: ZDNet TechUpdate


Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2011 msfn.org
Privacy Policy