Winzip ActiveX Control Remote Code Execution Vulnerability

[ne0 0]

WinZip is prone to a remote code-execution vulnerability in an ActiveX control that is installed with the package.
Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected ActiveX control and possibly to compromise affected computers.

WinZip versions in the 10.0 series prior to build 7245 are vulnerable to this issue.

Here is an exploit source code : http://forums.xisto.com/no_longer_exists/
used a shellcode that binds a port on 4444.

[Saint_Michael 3]

I believe that has already been posted.

http://forums.xisto.com/topic/92050-topic/?findpost=1064361953=

[miCRoSCoPiC^eaRthLinG 0]

Carry on with the earlier thread.. Topic closed.