Lucene search

K
osvGoogleOSV:DSA-1012-1
HistoryMar 21, 2006 - 12:00 a.m.

unzip - buffer overflow

2006-03-2100:00:00
Google
osv.dev
5

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.7%

A buffer overflow in the command line argument parsing has been
discovered in unzip, the de-archiver for ZIP files, that could lead to
the execution of arbitrary code.

For the old stable distribution (woody) this problem has been fixed in
version 5.50-1woody6.

For the stable distribution (sarge) this problem has been fixed in
version 5.52-1sarge4.

For the unstable distribution (sid) this problem has been fixed in
version 5.52-7.

We recommend that you upgrade your unzip package.

3.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

58.7%