Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2008-0888
HistoryMar 17, 2008 - 9:44 p.m.

Design/Logic Flaw

2008-03-1721:44:00
PRIOn knowledge base
www.prio-n.com
7

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.067 Low

EPSS

Percentile

93.7%

JSON

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

References

Related

openvas 18
redhat 1
nessus 10
cve 1
securityvulns 5
seebug 1
debian 1
debiancve 1
cbl_mariner 3
osv 1
ubuntucve 1
ubuntu 1
gentoo 1
centos 2
vmware 2
threatpost 1
openvas
openvas
Mandriva Update for unzip MDVSA-2008:068 (unzip)
2009-04-09 00:00:00
Ubuntu: Security Advisory (USN-589-1)
2009-03-23 00:00:00
CentOS Update for unzip CESA-2008:0196 centos3 x86_64
2009-02-27 00:00:00
redhat
redhat
(RHSA-2008:0196) Moderate: unzip security update
2008-03-18 00:00:00
nessus
nessus
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
2008-03-19 00:00:00
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
2008-04-11 00:00:00
Scientific Linux Security Update : unzip on SL3.x i386/x86_64
2012-08-01 00:00:00
cve
cve
CVE-2008-0888
2008-03-17 21:44:00
securityvulns
securityvulns
unzip code execution
2008-03-18 00:00:00
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:00:00
rPSA-2008-0116-1 unzip
2008-03-23 00:00:00
seebug
seebug
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
2008-03-20 00:00:00
debian
debian
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:01:39
debiancve
debiancve
CVE-2008-0888
2008-03-17 21:44:00
cbl_mariner
cbl_mariner
CVE-2008-0888 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
CVE-2008-0888 affecting package unzip 6.0-19
2020-10-08 18:09:51
osv
osv
unzip - potential code execution
2008-03-17 00:00:00
ubuntucve
ubuntucve
CVE-2008-0888
2008-03-17 00:00:00
ubuntu
ubuntu
unzip vulnerability
2008-03-20 00:00:00
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2008-04-06 00:00:00
centos
centos
unzip security update
2008-03-18 22:50:34
unzip security update
2008-03-18 20:50:20
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.067 Low

EPSS

Percentile

93.7%

JSON
Related for PRION:CVE-2008-0888
openvas18redhat1nessus10cve1securityvulns5seebug1debian1debiancve1cbl_mariner3osv1ubuntucve1ubuntu1gentoo1centos2vmware2threatpost1