PT-2014-8429 · Info Zip +5 · Info-Zip Unzip +5

🗓️ 28 Dec 2014 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Heap-based buffer overflow in Info-ZIP UnZip 6.0 and earlier allows remote code execution.

Reporter	Title	Published	Views	Family All 524
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect IBM Security Network Protection (CVE-2014-8139, CVE-2014-8140, CVE-2014-8141, and CVE-2014-9636 )	16 Jun 201821:25	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect IBM Security Network Intrusion Prevention System (CVE-2014-8139, CVE-2014-8140, CVE-2014-8141, and CVE-2014-9636 )	23 Feb 202219:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter Dynamic System Analysis (DSA) Preboot is affected by multiple vulnerabilities.	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed	22 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: An Info-ZIP Unzip vulnerability has been identified in IBM Tivoli Application Dependency Discovery Manager(TADDM).	26 Apr 202118:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in unzip affect IBM DataPower Gateways (CVE-2014-8141)	15 Jun 201807:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Unzip vulnerabilities affect PowerKVM (Multiple CVEs)	18 Jun 201801:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in unzip affect IBM Flex System Manager (FSM)	18 Jun 201801:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in unzip, krb5, tomcat, affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:30	–	ibm

Source	Link
bdu	www.bdu.fstec.ru/vul/2018-00031
errata	www.errata.altlinux.org/ALT-PU-2020-3294
linux	www.linux.oracle.com/errata/ELSA-2015-0700.html
ubuntu	www.ubuntu.com/security/CVE-2014-8139
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2014-8139
osv	www.osv.dev/vulnerability/MGASA-2014-0562
security-tracker	www.security-tracker.debian.org/tracker/CVE-2014-8139
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
errata	www.errata.altlinux.org/ALT-PU-2020-3281
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

12 Jun 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.8

CVSS 26.8

CVSS 37.8

EPSS0.63564

info-zip unzip vulnerability buffer overflow remote code execution malicious zip file update recommendations