RHEL 6 / 7 : unzip (RHSA-2015:0700)

Updated unzip packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

unzip: out-of-bounds write issue in test_compr_eb() (oCERT-2014-011)

An integer underflow flaw, leading to a buffer overflow, was found in the way unzip uncompressed certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash when the archive was tested with unzip's '-t' option...

Moderate: Red Hat Security Advisory: unzip security update

Updated unzip packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

unzip: getZip64Data() out-of-bounds read issues (oCERT-2014-011)

A buffer overflow flaw was found in the way unzip handled Zip64 files. A specially crafted Zip archive could possibly cause unzip to crash when the archive was uncompressed...

unzip: CRC32 verification heap-based buffer overread (oCERT-2014-011)

A buffer overflow flaw was found in the way unzip computed the CRC32 checksum of certain extra fields of a file. A specially crafted Zip archive could cause unzip to crash when the archive was tested with unzip's '-t' option...

unzip security update

6.0-2 - Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 Resolves: 1196132 1196120 1196124 1196128...

[SECURITY] Fedora 21 Update: arc-5.21p-5.fc21

Arc file archiver and compressor. Long since superseded by zip/unzip but useful if you have old .arc files you need to unpack...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)

This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10344)

This update fixes the following security issues : - input sanitization errors. bnc909214. CVE-2014-8139 - out-of-bounds read/write in testcompreb bnc914442. CVE-2014-9636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Fedora Update for unzip FEDORA-2015-1993

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: unzip-6.0-17.fc20

The unzip utility is used to list, test, or extract files from a zip archive. Zip archives are commonly found on MS-DOS systems. The zip utility, included in the zip package, creates zip archives. Zip and unzip are both compatible with archives created by PKWARER's PKZIP for MS-DOS, but the...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

Buffer overflow

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

CVE-2015-1315

CVE-2015-1315 : Buffer overflow in Info-ZIP UnZip 6.10b (charset_to_intern in unix/unix.c) allows remote code execution via a crafted string, demonstrated by CP866→UTF-8 conversion. Public sources confirm the vulnerability and note that outside Brocade SANnav, updates to unzip packages address th...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

[USN-2502-1] unzip vulnerabilities

========================================================================== Ubuntu Security Notice USN-2502-1 February 17, 2015 unzip vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

UnZip multiple security vulnerabilities

Few buffer overflows...

Info-ZIP UnZip Out-of-Bounds Write Denial of Service Vulnerability

Info-ZIP UnZip is a decompression software. An out-of-bounds write vulnerability in Info-ZIP UnZip "unix/unix.c:charsettointern" allows an attacker to construct a malicious file and trick the user into parsing it, which can crash the application...

SUSE-SU-2015:0377-1 Security update for unzip

This update fixes the following security issues: CVE-2014-8139: input sanitization errors bnc909214 CVE-2014-9636: out-of-bounds read/write in testcompreb bnc914442 Security Issues: CVE-2014-9636 CVE-2014-8139...