Symantec suffers from a missing bounds checks in dec2zip ALPkOldFormatDecompressor::UnShrink. Continue reading...