Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-0888
HistoryMar 17, 2008 - 9:44 p.m.

CVE-2008-0888

2008-03-1721:44:00
CWE-119
[email protected]
web.nvd.nist.gov
37
cve-2008-0888
needbits
inflate_dynamic
unzip
denial of service
code execution
remote attackers
nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

CPENameOperatorVersion
info-zip:unzipinfo-zip unzipeq*

References

Related

openvas 18
redhat 1
nessus 10
prion 1
securityvulns 5
osv 1
ubuntucve 1
ubuntu 1
cbl_mariner 3
debian 1
debiancve 1
seebug 1
centos 2
gentoo 1
vmware 2
threatpost 1
openvas
openvas
Mandriva Update for unzip MDVSA-2008:068 (unzip)
2009-04-09 00:00:00
Ubuntu: Security Advisory (USN-589-1)
2009-03-23 00:00:00
Debian Security Advisory DSA 1522-1 (unzip)
2008-03-19 00:00:00
redhat
redhat
(RHSA-2008:0196) Moderate: unzip security update
2008-03-18 00:00:00
nessus
nessus
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
2008-03-19 00:00:00
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
2008-04-11 00:00:00
Scientific Linux Security Update : unzip on SL3.x i386/x86_64
2012-08-01 00:00:00
prion
prion
Design/Logic Flaw
2008-03-17 21:44:00
securityvulns
securityvulns
unzip code execution
2008-03-18 00:00:00
rPSA-2008-0116-1 unzip
2008-03-23 00:00:00
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:00:00
osv
osv
unzip - potential code execution
2008-03-17 00:00:00
ubuntucve
ubuntucve
CVE-2008-0888
2008-03-17 00:00:00
ubuntu
ubuntu
unzip vulnerability
2008-03-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2008-0888 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
debian
debian
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:01:39
debiancve
debiancve
CVE-2008-0888
2008-03-17 21:44:00
seebug
seebug
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
2008-03-20 00:00:00
centos
centos
unzip security update
2008-03-18 22:50:34
unzip security update
2008-03-18 20:50:20
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2008-04-06 00:00:00
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON
Related for CVE-2008-0888
openvas18redhat1nessus10prion1securityvulns5osv1ubuntucve1ubuntu1cbl_mariner3debian1debiancve1seebug1centos2gentoo1vmware2threatpost1