X-Diesel Unreal Commander v0.92 (build 573) multiple vulnerabilities
|
Unreal Commander is an award winning freeware file manager for Windows 98/ME/2000/XP/2003/Vista. The application support multiple archive formats, has a built-in ftp client, and other features.
Unreal Commander fails to check user-supplied input while processing ZIP and RAR archives. A malformed ZIP or RAR file can be used to perform a directory traversal attack and place malware files in a location selected by the attacker. Successful exploitation can lead to a full compromitation of the system. Read more at: /advisories/adv_UnrealCommander_0_92_build_573_Multiple_Vulnerabilities.txt |