WinZip Computing warned last month of a flaw in WinZip, its tool for compressing and decompressing files that runs on the Windows operating system. WinZip versions 3.x, 6.x, 7.x, 8.x and 9.x contain vulnerabilities that could allow a remote attacker to execute malicious code and cause a buffer overflow.
The problem is caused by a flaw in the way WinZip handles command line inputs. Security software company Secunia has just rated the flaw "highly critical," the fourth highest out of its five severity levels.
This news comes only a couple of weeks after warnings that a flaw in Winamp, a media application that runs on Windows, has been exploited to infect people's computers with spyware.
|