Lucene search

K
ubuntuUbuntuUSN-2489-1
HistoryFeb 03, 2015 - 12:00 a.m.

unzip vulnerability

2015-02-0300:00:00
ubuntu.com
30

8.1 High

AI Score

Confidence

High

0.259 Low

EPSS

Percentile

96.7%

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • unzip - De-archiver for .zip files

Details

Michal Zalewski discovered that unzip incorrectly handled certain
malformed zip archives. If a user or automated system were tricked into
processing a specially crafted zip archive, an attacker could possibly
execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchunzip< 6.0-12ubuntu1.2UNKNOWN
Ubuntu14.04noarchunzip< 6.0-9ubuntu1.2UNKNOWN
Ubuntu12.04noarchunzip< 6.0-4ubuntu2.2UNKNOWN
Ubuntu10.04noarchunzip< 6.0-1ubuntu0.2UNKNOWN