The ZIP algorithm can compress repetitive data (like a file filled entirely with zeros) extremely efficiently. A 10 GB file of zeros can be compressed into a few megabytes.
Systems should be configured to reject archives where the ratio of compressed-to-uncompressed size is suspiciously high.
When an antivirus scanner or user unzips the file, the decompression engine attempts to expand every layer, leading to an exponential increase in disk space usage. 3. Purpose and Impact
Do not extract unknown or unexpectedly small zip files from untrusted sources. zip and recursive zip bombs ? 42.zip (2004) - Hacker News
The ZIP algorithm can compress repetitive data (like a file filled entirely with zeros) extremely efficiently. A 10 GB file of zeros can be compressed into a few megabytes.
Systems should be configured to reject archives where the ratio of compressed-to-uncompressed size is suspiciously high.
When an antivirus scanner or user unzips the file, the decompression engine attempts to expand every layer, leading to an exponential increase in disk space usage. 3. Purpose and Impact
Do not extract unknown or unexpectedly small zip files from untrusted sources. zip and recursive zip bombs ? 42.zip (2004) - Hacker News