Secunia Research has discovered a vulnerability in BitZipper, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to a boundary error in UNACEV2.DLL when extracting an ACE archive containing a file with an overly long filename. This can be exploited to cause a stack-based buffer overflow when a user extracts a specially crafted ACE archive. BitZipper version 4.1 SR-1 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/48377/secunia-BitZipper.txt
Source: https://packetstormsecurity.com/files/48377/secunia-BitZipper.txt.html