CVE:CVE-2006-0926
CNNVD:CNNVD-200602-445
Allume StuffIt Standard和Deluxe 9.0、ZipMagic Deluxe 9.0以及StuffIt Expander 9.0.0.21 Engine 9.0.0.21中存在多个目录遍历漏洞。远程攻击者可以借助(1) zip或(2) tar压缩包中的某些特制路径名称创建和覆盖任意文件。
solution:Upgrade smithmicro stuffit_deluxe to a higher version than 9.0,and avoid the version 9.0; Upgrade smithmicro stuffit_expander to a higher version than 9.0.0.21_engine_9.0.0.21,and avoid the version 9.0.0.21_engine_9.0.0.21; Upgrade smithmicro stuffit_standard to a higher version than 9.0,and avoid the version 9.0; Upgrade smithmicro zipmagic_deluxe to a higher version than 9.0,and avoid the version 9.0