Lincoln has discovered a vulnerability in Urgent Backup, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing ZIP archives. This can be exploited to cause a stack-based buffer overflow by tricking a user into restoring files from a specially crafted ZIP file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 3.20. Other versions may also be affected.

Solution
Do not process untrusted ZIP files.

Provided and/or discovered by
Lincoln, Corelan

Original Advisory
http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034

Deep Links
Links available to Secunia VIM customers