Jean-Sébastien Guay-Leroux has discovered a vulnerability in zoo, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.

The vulnerability is caused due to a boundary error in the "fullpath()" function in misc.c. This can be exploited to cause a buffer overflow when a specially-crafted ZOO archive containing a file with an overly long file and directory name is processed (e.g. listing archive contents or adding new files to the archive).

The vulnerability has been confirmed in version 2.10. Other versions may also be affected.

Solution
Restrict use to trusted ZOO archives.

Provided and/or discovered by
Jean-Sébastien Guay-Leroux

Changelog
Further details available in Customer Area

Original Advisory
http://www.guay-leroux.com/projects/zoo-advisory.txt

Deep Links
Links available in Customer Area