Saint_Michael
Dec 25 2006, 12:02 PM
| | Although this is a month old and most likely people have already done this, but for those who who use winzip their is a somewhat major vulnerability with WINZIP in which they patched it with build 7245.
http://www.winzip.com/wz7245.htm
QUOTE This vulnerability could allow a remote attacker to execute arbitrary code on a system with an unpatched installation of WinZip 10.0 if the user was to visit a malicious web page. While there are no known exploits as of this announcement, WinZip 10.0 users are strongly urged to update to build 7245, due to the critical nature of the vulnerability.
Of course by now Winzip 11 has come out and fixed this so it would be wise to download winzip 11 for any security updates that might have been done to winzip with in the month of this build and Winzip 11. |
Reply
delivi
Dec 25 2006, 08:22 PM
Wow that's great, I recently made a post on the Vulnerability in Winzip 10. Thats very glad to hear a next stable update is released for winzip. Can we update from Winzip 10 to WinZip 11 without needing to purchase a new license, that is by using the Licence of Winzip 10.
Reply
Saint_Michael
Dec 25 2006, 08:29 PM
you have to repurchase a license but at 50% off. Of course I don't really see the need to purchase winzip since it's major flaw is that it is free for the most part except for that long load up screen.
Reply
Dooga
Dec 27 2006, 05:53 AM
I highly doubt that anyone's going to hack my computer and take control of WinZip.... that's kind of ridiculous...
Reply
Saint_Michael
Dec 27 2006, 11:48 AM
Well was it ridiculous that someone would take a whistle blow it in a pay phone and get free long distance? You be surprised. it doesn't take popular software to crack a computer you just need to find the right spot and their you go a computer just been hacked.
Reply
Kioku
Dec 28 2006, 12:22 AM
This really doesn't bother me much. I use WinRAR for all of my archiving needs. This might sound like a very stupid question to ask, but is WinRAR also vulnerable to this exploit? :|
Reply
Saint_Michael
Dec 28 2006, 02:22 AM
I doubt it they may work the same way but most likely the programming is different and just went to their site and didn't see anything about a security update of any sorts.
Reply
FirefoxRocks
Jan 2 2007, 09:10 PM
Everyone, there is a free archiving/decompression program that is called ZipGenius. I am NOT vulnerable to any known security threats with ZipGenius because there aren't any yet. It is a bit over 5 MB and has a very easy-to-use and powerful user interface. Also, it acts like WinZip and WinRAR combined. It has many features (at least good enough for my needs). Try it today!
Reply
Dooga
Jan 9 2007, 04:53 PM
I don't really like Winzip since it doesn't support RAR files. However, I really don't understand how they "license" the winzip if you can use it for an unlimited amount of time. Actually a lot of these zipping software can be used for unlimited amount of time... I used PowerArchiver for over 400 days and it didn't expire yet...
Reply
qh3pk
May 10 2007, 11:51 AM
See this document "The most famous of compression utilities boasts some new tricks but forces you to pay extra for certain advanced features. When you create an archive, WinZip 11 now offers an option to let WinZip pick the best compression method for each file. The result is a significantly smaller archive. For instance, .wav files, which lose only about 14 percent of their size with traditional .zip compression, shrink to just over half their original size with Best Method on. Only WinZip 10 or 11, however, can extract files from the resulting archive--which could be confusing, as such archives continue to use the .zip extension for their improved-but-incompatible files. To WinZip's credit, the program warns you about the incompatibility. And the company has posted the technical specifications for these changes so that other compression vendors can eventually make their programs compatible. Other improvements create no compatibility issues. The best of these include thumbnail views of pictures inside an archive, presented in a window that looks more like Windows Explorer with every update; and the ability to extract from .bz2 and .rar files. You're still able to create split-volume archives (a ZIP archive split into multiple files of user-definable size). It feels like WinZip International isn't all that interested in this standard $30 (as of 12/6/06) version of WinZip that I looked at. They'd rather sell you the $50 (as of 12/6/06) WinZip Pro. Even features that were once available to every WinZip user, like command-line support, are now Pro exclusives. WinZip Pro 11 gives you not only thumbnails, but a full image viewer. It also now lets you zip directly to CD, DVD, and FTP, and automate your backups. " thanks.
Reply
Similar Topics
Keywords : winzip 10 vunerability update winzip 11- Iphone Update Disable Hacked Phones
- (5)
- Hole In Microsoft Messenger Program Requires A Immediate Update
- For Users of MSN Messenger 6.2, 7.0 and 7.5 versions of MSN Messenger (0)
SOURCE Well it seems that Microsoft found a huge hole in MSN Messenger that was bad enough that
they want people to upgrade to the current Messenger which is Live 8.1 or something like that. As
for details on the problem they just said the following, "..which let hackers embed malicious code
in Web chat invitations to users." and that they found this problem in "6.2, 7.0 and 7.5, as well as
Windows Live Messenger 8.0." Although it was interesting to know that people were actually
complaining about Live Messenger being a resource hog, well the last time I check msn w...
New Virus Called Storm Worm Or W32/nuwar@mm Is Out And About
- WINZIP/Rar be WARNED (4)
To think the Microsoft ANI exploit and the botnet things were bad but this just top the charts, this
new variation of the Storm virus of last year gets a new powerful punch. The virus gets sent
through a password protected zip fil in which the password is contain in a image file in the email.
The email subject contains either Worm Alert!" or "Trojan Detected! so do not open and just
delete it. Also the image file will read something like UrgentNotice.gif" or "AbuseReport.gif. and
the zip file will read something like "patch-####.zip" or "removal-####.zip.". ...
Microsoft Update Program Being Used By Hackers
- (6)
Although I am bit surprise that no one really take about way back then, but it seems the hackers and
crackers I starting to use the microsoft update downloading to transmit there malware and torjans to
compromised computers. The reason being is that the Microsoft update program bypasses firewall
security protocals and so when that malware is getting download, your firewall and virus programs
will not pick it up. I know a few people turn it off and either download them manually or don't
download them at all. So to toss out a warning, when you get he windows update ...
New Winzip Vulnerabilities
- (2)
A very serious problem is found in the new version of Winzip 10. This is due to the FileView
ActiveX Control used by WinZip 10. Users of WinZip 10 who accedientially venture into malicious
websites could suffer due to this. This is rated highly critical by the security firm Secunia. Only
those who are using WinZip 10.0 with a build lower than 7245 are exposed to this critical bug.
Those who are using WinZip 9 and older versions do not have this problem. The Patch WinZip 10.0
build 7245 is available free of charge to all registered users of both Standard and Profess...
Another Firefox Security Update
- Firefox v1.0.3 (6)
Yes, another update. You can read the fixes at ZDNet or here at the Mozilla Release Notes .
Before installing v1.0.3 make sure that the directory you've chosen to install into is clean and
doesn't contain any previous Firefox installations! (known issue) Greetz, Rik©...
Windows Update Email Scam
- its a trojen horse (8)
QUOTE A new scam by hackers has some people believing they are receiving an e-mail about a
critical update to Windows when in actuality they are installing a Trojan horse, Sophos said on
Friday. The e-mail directs victims to a fake version of the Windows Update site, where there are
links to download the malicious "patches." "The email uses the Microsoft branding and style so to
the casual observer it appears to be legitimate," Gregg Mastoras, Senior Security Analyst at Sophos,
told BetaNews. If users download the "patches," they are actually installing the Troj/DS...
Firefox Security Update (firefox 1.0.2)
- Released 23-03-2005 (14)
Yesterday Mozilla (foundation) released another security update for Firefox. QUOTE(Mozilla
Foundation) March 23, 2005, (Mountain View, CA). The Mozilla Foundation, a non-profit organization
dedicated to preserving choice and promoting innovation on the Internet, today announced a security
update for its Firefox Web browser. The update is a proactive security release to patch a bug
identified by Internet Security Systems, a premier security research, products, and services
company. No known exploits of the bug have been reported prior to the update's release. ...
Looking for Winzip, 10, Vunerability/update, To, Winzip, 11
|
|
Searching Video's for Winzip, 10, Vunerability/update, To, Winzip, 11
|
advertisement
|
|