Secunia Research has discovered a vulnerability in UltimateZip, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in UNACEV2.DLL when extracting an ACE archive containing a file with an overly long filename. This can be exploited to cause a stack-based buffer overflow when a user extracts a specially crafted ACE archive.

The vulnerability is related to:
SA16479

The vulnerability has been confirmed in versions 2.7,1, 3.0.3, and 3.1b. Other versions may also be affected.

Solution
Do not extract untrusted ACE archives.

Provided and/or discovered by
Secunia Research

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2006-29/

Deep Links
Links available in Customer Area