Secunia

Some vulnerabilities have been reported in WinZip, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to the inclusion of a vulnerable Microsoft "gdiplus.dll" library.

For more information:
SA31675

Successful exploitation requires that a user is tricked into opening a malicious ZIP archive when the view mode is set to "Explorer Style/Thumbnails" or when using the internal image viewer in WinZip Pro.

The vulnerabilities are reported in versions 11.0, 11.1, and 11.2 when installed on Windows 2000.

Solution
Update to version 11.2 SR-1.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Winzip:
http://www.winzip.com/wz112sr1.htm

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area