CVEvulnerability

CVE-2008-4420

9.3 HIGH Published 2009-04-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-04-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent C.04.60, HP Performance Agent C.04.70 and C.04.72, TurboZIP 6.0, and other products; allow user-assisted attackers to execute arbitrary code via a long filename in a ZIP archive during a (1) Fix (aka Repair), (2) Add, (3) Update, or (4) Freshen action, a related issue to CVE-2006-3985.

Affected configurations

• hp openview performance agent c.04.60 • hp openview performance agent c.04.70 • hp openview performance agent c.04.72 • innermedia dynazip max (<= 5.0.0.7) • innermedia dynazip max secure (<= 6.0.0.4) • filestream turbozip 6.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References