CVE-2008-4420 Memory corruption in n/a
Stack-based buffer overflow in DynaZip library allows arbitrary code execution via malicious ZIP filenames during repair or update actions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2008-4420?
CVE-2008-4420 is a critical memory corruption vulnerability in n/a, published on 13 Apr 2009. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985.
Weakness: CWE-119
Which versions are affected by CVE-2008-4420?
It affects 4 products.
Products include Filestream Turbozip, Hp Openview Performance Agent, Innermedia Dynazip Max, Innermedia Dynazip Max Secure.
How do I fix CVE-2008-4420?
No fix has been published for CVE-2008-4420 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2008-4420 being exploited?
There is no known exploitation of CVE-2008-4420 in the wild and no public exploit code.
Sources
Also known as GHSA-h48g-43cm-jhf2.