Can a zip file executable? For instance can you have a virus in the form of a zip. Obviously a virus could be inside a zip file but can the actual zip execute?

Reason i ask is i have a website that currently allows only jpg, jpeg, png and gif file extensions i had an idea today to allow people to upload icon packs, however, the icon packs would need to be in the form of a zip because there would be so many images.

I don't need my site infested with viruses.

link|improve this question
feedback

migrated from stackoverflow.com Jan 30 '11 at 8:30

This question came from our site for professional and enthusiast programmers.

2 Answers

Theoretically, some tools for uncompressing zip files may have vulnerabilities that can lead to some code execution. However, it is really unlikely that it is your case. Uncompressing tools for your programming language probably don’t have such vulnerabilities, and if the web server is running a UNIX like operating system (e.g. Linux), Windows viruses are not going to be executed anyway.

link|improve this answer
feedback

a zip might cause some trouble while you are trying to unzip it:

http://en.wikipedia.org/wiki/Zip_bomb

link|improve this answer
+1, a compression bomb is much more likely than a vulnerability in the extraction tool. – Matthieu Cartier Jan 30 '11 at 10:14
feedback

Your Answer

 
or
required, but never shown