Lucene search
+L

1840 matches found

NVD
NVD
added 2020/01/31 11:15 p.m.26 views

CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.2AI score0.07448EPSS
SaveExploits0References4
Prion
Prion
added 2020/01/31 11:15 p.m.32 views

Heap overflow

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

6.8CVSS9.8AI score0.07448EPSS
SaveExploits0References4Affected Software6
OSV
OSV
added 2020/01/31 10:15 p.m.10 views

AZL-35331 CVE-2014-8139 affecting package unzip for versions less than 6.0-20

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS7.8AI score0.07448EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/31 10:15 p.m.6 views

ALPINE-CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.4AI score0.07448EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/31 10:15 p.m.11 views

AZL-6934 CVE-2014-8140 affecting package unzip for versions less than 6.0-19

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS7.8AI score0.07448EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/31 10:15 p.m.29 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS7.8AI score
SaveExploits0References5
NVD
NVD
added 2020/01/31 10:15 p.m.22 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.2AI score0.07448EPSS
SaveExploits0References4
OSV
OSV
added 2020/01/31 10:15 p.m.38 views

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.2AI score
SaveExploits0References6
Prion
Prion
added 2020/01/31 10:15 p.m.31 views

Heap overflow

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

6.8CVSS9.8AI score0.07448EPSS
SaveExploits0References4Affected Software7
Cvelist
Cvelist
added 2020/01/31 10:08 p.m.33 views

CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

8.2AI score0.07448EPSS
SaveExploits0References4
CVE
CVE
added 2020/01/31 10:08 p.m.330 views

CVE-2014-8141

CVE-2014-8141 is a heap-based buffer overflow in the getZip64Data function of Info-ZIP UnZip 6.0 and earlier. Exploitation is via a crafted ZIP file passed to unzip with the -t option, enabling remote code execution as described by multiple advisories and CVE family references in connected docume...

7.8CVSS8.2AI score0.07448EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2020/01/31 10:00 p.m.30 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8AI score0.07448EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/01/31 10:00 p.m.30 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

8.2AI score0.07448EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2020/01/31 10:00 p.m.52 views

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.4AI score0.07448EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/01/31 10:00 p.m.30 views

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

8.3AI score0.07448EPSS
SaveExploits0References4
CVE
CVE
added 2020/01/31 10:00 p.m.325 views

CVE-2014-8139

CVE-2014-8139 is a vulnerability in Info-ZIP UnZip 6.0 and earlier, where a heap-based buffer overflow during CRC32 verification can be triggered by a crafted zip file, enabling code execution via unzip -t. Several Connected documents confirm this flaw is present in bundled/unzip implementations ...

7.8CVSS8.3AI score0.07448EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2020/01/31 10:00 p.m.33 views

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8AI score0.07448EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2020/01/31 10:00 p.m.66 views

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

7.8CVSS8.5AI score0.07448EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/01/19 3:31 a.m.31 views

CVE-2018-1002200

A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attacker could use this vulnerability to write files outside the target directory and overwrite existing files with malicious code or...

7.3CVSS2.4AI score0.04802EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/12/31 12:00 a.m.76 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : zziplib Multiple Vulnerabilities (NS-SA-2019-0226)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has zziplib packages installed that are affected by multiple vulnerabilities: - In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address when handling disk64trailer local entries in zzipfetchdisktraile...

6.5CVSS5.8AI score0.0261EPSS
SaveExploits2References3
Rows per page
Query Builder