[TZO-23-2020] - AVAST Generic Archive Bypass (ZIP)
Thierry Zoller <[email protected]> Tue, 25 Feb 2020 22:24:22 +0100
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <[email protected]> |
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCgogICAgICAgICAgICAgICAgIEZyb20gdGhlIGxvdy1oYW5naW5nLWZy dWl0LWRlcGFydG1lbnQKCSAgICAgQXZhc3QgR2VuZXJpYyBNYWxmb3JtZWQgQXJjaGl2ZSBCeXBh c3MgKFpJUCBHRmxhZykKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpSZWxlYXNlIG1vZGUgICAgOiBDb29yZGlu YXRlZCBEaXNjbG9zdXJlClJlZiAgICAgICAgICAgICA6IFtUWk8tMjMtMjAyMF0gLSBBVkFTVCBH ZW5lcmljIEFyY2hpdmUgQnlwYXNzIChaSVApClZlbmRvciAgICAgICAgICA6IEFWQVNUClN0YXR1 cyAgICAgICAgICA6IFBhdGNoZWQgLSB2ZXJzaW9uIDEyIGFuZCBuZXdlcgpDVkUgICAgICAgICAg ICAgOiBDVkUtMjAyMC05Mzk5CgpCbG9nICAgICAgICAgICAgOiAKaHR0cHM6Ly9ibG9nLnpvbGxl ci5sdS8yMDA5LzA0L2Nhc2UtZm9yLWF2LWJ5cGFzc2VzZXZhc2lvbnMuaHRtbApUd2l0dGVyICAg ICAgICAgOiBodHRwczovL3R3aXR0ZXIuY29tL3RoaWVycnl6b2xsZXIKRGlzbG9zdXJlIFBvbGlj eTogaHR0cHM6Ly9jYXJhdmVsYWhxLmNvbS9iL3BvbGljeS8yMDk0OQoKQWZmZWN0ZWQgUHJvZHVj dHMKPT09PT09PT09PT09PT09PT0KQXZhc3QgQW50aXZpcnVzIFBybyBQbHVzCkF2YXN0IEFudGl2 aXJ1cyBQcm8KQXZhc3QgQW50aXZpcnVzIGbDvHIgTGludXgKCkkuIEJhY2tncm91bmQKPT09PT09 PT09PT09PQpBdmFzdCBpcyBkZWRpY2F0ZWQgdG8gY3JlYXRpbmcgYSB3b3JsZCB0aGF0IHByb3Zp ZGVzIHNhZmV0eSBhbmQgcHJpdmFjeSAKZm9yIGFsbCwgbm8gbWF0dGVyIHdobyB5b3UgYXJlLCB3 aGVyZSB5b3UgYXJlLCBvciBob3cgeW91IGNvbm5lY3QuCkF2YXN0IGlzIG9uZSBvZiB0aGUgbGFy Z2VzdCBzZWN1cml0eSBjb21wYW5pZXMgaW4gdGhlIHdvcmxkIHVzaW5nIApuZXh0LWdlbiB0ZWNo bm9sb2dpZXMgdG8gZmlnaHQgY3liZXIgYXR0YWNrcyBpbiByZWFsIHRpbWUuIFdlIGRpZmZlciAK ZnJvbSBvdGhlciBuZXh0LWdlbiBjb21wYW5pZXMgaW4gdGhhdCB3ZSBoYXZlIGFuIGltbWVuc2Ug Y2xvdWQtYmFzZWQgCm1hY2hpbmUgbGVhcm5pbmcgZW5naW5lIHRoYXQgcmVjZWl2ZXMgYSBjb25z dGFudCBzdHJlYW0gb2YgZGF0YSBmcm9tIG91ciAKaHVuZHJlZHMgb2YgbWlsbGlvbnMgb2YgdXNl cnMsIHdoaWNoIGZhY2lsaXRhdGVzIGxlYXJuaW5nIGF0IAp1bnByZWNlZGVudGVkIHNwZWVkcyBh bmQgbWFrZXMgb3VyIGFydGlmaWNpYWwgaW50ZWxsaWdlbmNlIGVuZ2luZSAKc21hcnRlciBhbmQg ZmFzdGVyIHRoYW4gYW55b25lIGVsc2XigJlzLgoKCklJLiBEZXNjcmlwdGlvbgotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tClRoZSBwYXJzaW5nIGVuZ2luZSBzdXBwb3J0cyB0aGUgWklQIGFy Y2hpdmUgZm9ybWF0LiBUaGUgcGFyc2luZyBlbmdpbmUgCmNhbiBiZSBieXBhc3NlZCAgYnkgc3Bl Y2lmaWNhbGx5IG1hbmlwdWxhdGluZyBhbiBaSVAgQXJjaHZlIHNvIHRoYXQgaXQgCmNhbiBiZSBh Y2Nlc3NlZCBieSBhbiBlbmQtdXNlciBidXQgbm90IHRoZSBBbnRpLVZpcnVzIHNvZnR3YXJlLiBU aGUgQVYgCmVuZ2luZSBpcyB1bmFibGUgdG8gc2NhbiB0aGUgY29udGFpbmVyIGFuZCBnaXZlcyAg dGhlIGZpbGUgYSAiY2xlYW4iIApyYXRpbmcuCgpJIG1heSByZWxlYXNlIGZ1cnRoZXIgZGV0YWls cyBhZnRlciBhbGwga25vd24gdnVsbmVyYWJsZSB2ZW5kb3JzIGhhdmUgCnBhdGNoZWQgdGhlaXIg ZW5naW5lcy4KCgpJSUkuIEltcGFjdAotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCkltcGFj dHMgZGVwZW5kcyBvbiB0aGUgY29udGV4dHVhbCB1c2Ugb2YgdGhlIHByb2R1Y3QgYW5kIGVuZ2lu ZSB3aXRoaW4gCnRoZSBvcmdhbmlzYXRpb24gb2YgYSBjdXN0b21lci4gR2F0ZXdheSBQcm9kdWN0 cyAoRW1haWwsIEhUVFAgUHJveHkgZXRjKSAKbWF5IGFsbG93IHRoZSBmaWxlIHRocm91Z2ggdW5z Y2FubmVkIGFuZCBnaXZlIGl0IGEgY2xlYW4gYmlsbCBvZiBoZWFsdGguIApTZXJ2ZXIgc2lkZSBB ViBzb2Z0d2FyZSB3aWxsIG5vdCBiZSBhYmxlIHRvIGRpc2NvdmVyIGFueSBjb2RlIG9yIHNhbXBs ZSAKY29udGFpbmVkIHdpdGhpbiB0aGlzIElTTyBmaWxlIGFuZCBpdCB3aWxsIG5vdCByYWlzZSBz dXNwaWNpb24gZXZlbiAgaWYgCnlvdSBrbm93IGV4YWN0bHkgd2hhdCB5b3UgYXJlIGxvb2tpbmcg Zm9yIChXaGljaCBpcyBmb3IgZXhhbXBsZSBncmVhdCB0byAKaGlkZSB5b3VyIGltcGxhbnRzIG9y IEV4ZmlsdHJhdGlvbi9QaXZvdCBTZXJ2ZXIpLgoKVGhlcmUgaXMgYSBsb3QgbW9yZSB0byBiZSBz YWlkIGFib3V0IHRoaXMgYnVnIGNsYXNzLCBzbyByYXRoZXIgdGhhbiBib3JlIAp5b3Ugd2l0aCBp dCBpbgp0aGlzIGFkdmlzb3J5IEkgcHJvdmlkZSBhIGxpbmsgdG8gbXkgMjAwOSBibG9nIHBvc3QK aHR0cDovL2Jsb2cuem9sbGVyLmx1LzIwMDkvMDQvY2FzZS1mb3ItYXYtYnlwYXNzZXNldmFzaW9u cy5odG1sCgpJVi4gUGF0Y2ggLyBBZHZpc29yeQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t CjExLjEwLjIwMTkgLSBTdWJtaXNzaW9uCjI0LjAyLjIwMjAgLSBDb25maXJtYXRpb24gYnkgQXZh c3QgdGhhdCB0aGVzZSBoYXZlIGJlZW4gcGF0Y2hlZC4KIlRoZSBmaXggd2FzIHJlbGVhc2VkIGlu IHZpcnVzIGRlZmluaXRpb25zIDIwMDExNC0wIChleGNlcHQgZm9yIHZlcnkgb2xkIApwcm9ncmFt IHZlcnNpb25zIDUueCAtIDExLnggd2hlcmUgaXQgaGFzbid0IGJlZW4gcmVsZWFzZWQgeWV0KS4K U28gYW55IHByb2dyYW0gKHZlcnNpb24gMTIgYW5kIG5ld2VyKSB3aXRoIHVwLXRvLWRhdGUgdmly dXMgZGVmaW5pdGlvbnMgCmhhcyB0aGUgdXBkYXRlZCB1bnBhY2tlci4iCgoKX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU2VudCB0aHJvdWdoIHRoZSBGdWxs IERpc2Nsb3N1cmUgbWFpbGluZyBsaXN0Cmh0dHBzOi8vbm1hcC5vcmcvbWFpbG1hbi9saXN0aW5m by9mdWxsZGlzY2xvc3VyZQpXZWIgQXJjaGl2ZXMgJiBSU1M6IGh0dHA6Ly9zZWNsaXN0cy5vcmcv ZnVsbGRpc2Nsb3N1cmUv