2 matches found
Info-ZIP UnZip Out-of-Bounds Write Denial of Service Vulnerability
Info-ZIP UnZip is a decompression software. An out-of-bounds write vulnerability in Info-ZIP UnZip "unix/unix.c:charsettointern" allows an attacker to construct a malicious file and trick the user into parsing it, which can crash the application...
7.5CVSS7.1AI score0.04898EPSS
SaveExploits2References1
PT-2015-5205
Name of the Vulnerable Software and Affected Versions Info-Zip UnZip version 6.10b Description The issue is related to a buffer overflow in the charset to intern function, which can be exploited by remote attackers to execute arbitrary code. This is achieved by converting a crafted string, for...
7.5CVSS0.04898EPSS
SaveExploits2References11
20