Zip of Death

Ernest W. Lessenger ernest at OACYS.COM
Mon Jun 9 20:59:18 IST 2003


Does anyone know how to create and/or defend against the zip of death? I
have a piece of software (open-source, not developed by me) that I *think*
is probably susceptible, but I don't know exactly how this attack works.
I'd be happy to know how to defend against this (presumably by watching out
for a loop in the decompression routing), or happier to have a sample to
test with. PLEASE DON'T EMAIL IT LIVE!!!!

Thanks,
--Ernest



More information about the MailScanner mailing list