Zip of Death

Ernest W. Lessenger ernest at OACYS.COM
Mon Jun 9 21:06:23 IST 2003

Ah, got it. I know that MS protects me from it, but I have a piece of
software (an HTML proxy) that I think is susceptible. I want to try it out
and see what needs to be done to fix it.


At 10:01 PM 6/9/2003 +0200, you wrote:
> > Does anyone know how to create and/or defend against the zip of death? I
> > have a piece of software (open-source, not developed by me) that I *think*
> > is probably susceptible, but I don't know exactly how this attack works.
> > I'd be happy to know how to defend against this (presumably by watching out
> > for a loop in the decompression routing), or happier to have a sample to
> > test with. PLEASE DON'T EMAIL IT LIVE!!!!
>MS allready protects you from zip of death. Its nothing more then a zip
>with a file inside thats very compressed, for example a file with a few
>million zeros.

More information about the MailScanner mailing list