Secunia Research has discovered a vulnerability in ALZip, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to multiple boundary errors when reading the filename of a compressed file from ALZ, ARJ, ZIP, UUE or XXE archives. This can be exploited to cause a stack-based buffer overflow (ALZ), or a heap-based buffer overflow (ARJ / ZIP / UUE / XXE). Successful exploitation allows execution of arbitrary code when a malicious ALZ / ARJ archive is opened, or when a ZIP / UUE / XXE archive is extracted.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40461/secunia-ALZip.txt
Source: https://packetstormsecurity.com/files/40461/secunia-ALZip.txt.html