CompreXX Archive Extraction Directory traversal
Create any archive type from the 28 available with a single right click
The plug-in based product ships with 10 plug-ins that have full support for 28 archive types and extract support for 47 archive types.
You can add support for new archive types by installing their plug-ins.

http://www.comprexx.com

Credit:
The information has been provided by Hamid Ebadi

The original article can be found at : http://www.bugtraq.ir
http://www.bugtraq.ir/articles/advisory/comprexx_directory_traversal/7

Vulnerable Systems:
CompreXX 4.1

Detail :

The vulnerability is caused due to an input validation error when extracting files compressed with RAR (.rar) , JAR (.jar) and ZIP (.zip)
This makes it possible to have files extracted to arbitrary locations outside the specified directory (like StartUp) using the "../" directory traversal sequence.

Solution:
Do not extract untrusted RAR , JAR and ZIP files.
To reduce the risk, never extract files as an administrative user.

harmless exploit:
use HEAP : http://www.hamid.ir/tools/


# copyright : http://www.bugtraq.ir