[jira] [Commented] (TIKA-3644) OfficeParser can not detect embedded zip bomb in the office documents

["Tim Allison (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/TIKA-3644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17474453#comment-17474453 ] 

Tim Allison commented on TIKA-3644:
-----------------------------------

How are you calling Tika?  I'm not able to get an exception with tika-app (2.2.1) on zipbomb.doc nor on any of the others I've tried.

 

You shouldn't get a zipbomb exception for a zip file that only has 5(?) levels.  It should take a bunch more levels to trigger the bomb exception.

> OfficeParser can not detect embedded zip bomb in the office documents
> ---------------------------------------------------------------------
>
>                 Key: TIKA-3644
>                 URL: https://issues.apache.org/jira/browse/TIKA-3644
>             Project: Tika
>          Issue Type: Bug
>          Components: parser
>    Affects Versions: 2.2.1
>            Reporter: Sergen Bağ
>            Priority: Minor
>         Attachments: 10_2_2_2_2.zip, zipbomb.doc, zipbomb.docx, zipbomb.ppt, zipbomb.pptx, zipbomb.xls, zipbomb.xlsx
>
>
> Hi, I am trying to get "zip bomb detection" exception but I can't. I used attachments as below and I saw this situation like that:
> When I send "zipbomb.xls" and "zipbomb.doc" to Tika, Tika threw exception.
> When I send "zipbomb.xlsx","zipbomb.docx","zipbomb.ppt" and "zipbomb.pptx" to Tika, Tika didn't throw exception.
> Thanks.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)