1624 matches found
Design/Logic Flaw
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
CVE-2008-0888
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
AZL-35330 CVE-2008-0888 affecting package unzip for versions less than 6.0-20
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
CVE-2008-0888
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
AZL-6932 CVE-2008-0888 affecting package unzip for versions less than 6.0-19
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
EUVD-2008-0895
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
CVE-2008-0888
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
CVE-2008-0888
CVE-2008-0888 affects unzip. The NEEDBITS macro in inflate_dynamic (inflate.c) can be triggered with invalid buffers, leading to remote DoS (crash) and potentially arbitrary code execution via freeing uninitialized or previously-freed data. Connected advisories confirm unzip updates/patches exist...
CVE-2008-0888
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
CVE-2008-0888
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
---------------------------------------------------------------------- Debian Security Advisory DSA-1522-1 [email protected] http://www.debian.org/security/ Florian Weimer March 17, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
DSA-1522-1 unzip - potential code execution
Bulletin has no description...
CVE-2008-0888: Improper Restriction of Operations within the Bounds of a Memory Buffer
The NEEDBITS macro in the inflatedynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data...
PT-2008-2503 · Info Zip · Unzip
Name of the Vulnerable Software and Affected Versions: unzip affected versions not specified Description: The issue is related to the NEEDBITS macro in the inflate dynamic function in inflate.c, which can be invoked using invalid buffers. This allows remote attackers to cause a denial of service...
Debian Security Advisory DSA 903-2 (unzip)
The remote host is missing an update to unzip announced via advisory DSA 903-2. The unzip update in DSA 903 contained a regression so that symbolic links that are resolved later in a zip archive aren't supported anymore. This update corrects this behaviour. For completeness, below plese find the...
Debian Security Advisory DSA 344-1 (unzip)
The remote host is missing an update to unzip announced via advisory DSA 344-1. OpenVAS Vulnerability Test $Id: deb3441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 344-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 903-1 (unzip)
The remote host is missing an update to unzip announced via advisory DSA 903-1. Imran Ghory discovered a race condition in the permissions setting code in unzip. When decompressing a file in a directory an attacker has access to, unzip could be tricked to set the file permissions to a different...
Debian Security Advisory DSA 1012-1 (unzip)
The remote host is missing an update to unzip announced via advisory DSA 1012-1. A buffer overflow in the command line argument parsing has been discovered in unzip, the de-archiver for ZIP files that could lead to the execution of arbitrary code. For the old stable distribution woody this proble...
Debian: Security Advisory (DSA-344)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-903-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...