CVE:CVE-2004-1094
CNNVD:CNNVD-200501-184
DUNZIP32.dll是一个较流行的压缩库。
InnerMedia DynaZip DUNZIP32.dll 5.00.03及之前版本中存在缓冲区溢出漏洞。
由于在解压包含有超长文件名的zip文件时存在溢出，攻击者可利用此漏洞执行任意代码。多个使用DUNZIP32.dll的软件均受此影响，包括Realplayer、RealOne、CheckMark Multiledger、McAfee及IBM Lotus Notes。
solution:Upgrade checkmark checkmark_payroll to a higher version than 3.9.6,3.7.5,3.9.1,3.9.2,3.9.3,3.9.4,3.9.5,and avoid the version (,3.9.6],3.7.5,3.9.1,3.9.2,3.9.3,3.9.4,3.9.5; Upgrade checkmark multiledger to a higher version than 7.0.1,6.0.3,6.0.5,7.0.0,and avoid the version (,7.0.1],6.0.3,6.0.5,7.0.0; Upgrade innermedia dynazip_library to a higher version than 5.00.00,5.00.01,5.00.02,5.00.03,and avoid the version 5.00.00,5.00.01,5.00.02,5.00.03; Upgrade realnetworks realone_player to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade realnetworks realplayer to a higher version than 10.0,10.0_6.0.12.690,10.0_beta,10.5,10.5_6.0.12.1016_beta,10.5_6.0.12.1040,10.5_6.0.12.1053,and avoid the version 10.0,10.0_6.0.12.690,10.0_beta,10.5,10.5_6.0.12.1016_beta,10.5_6.0.12.1040,10.5_6.0.12.1053