290 matches found
CVE-2016-9844
Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...
UnZip: Multiple vulnerabilities
Background Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP compressed files. Description Multiple vulnerabilities were found in UnZip. Please review the referenced CVE’s for additional information. Impact Remote attackers could execute arbitrary code or cause Denial of Service...
CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
AZL-6939 CVE-2015-7697 affecting package unzip for versions less than 6.0-19
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
Heap overflow
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
Design/Logic Flaw
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7696
Info-ZIP UnZip 6.0 is vulnerable to a heap-based buffer over-read that can crash the application or possibly allow arbitrary code execution when processing crafted password-protected ZIP archives, possibly related to an Extra-Field size value. This CVE (CVE-2015-7696) is widely reported across di...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
CVE-2015-7697
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7697
Info-ZIP UnZip 6.0 is affected by CVE-2015-7697: processing a ZIP archive containing empty bzip2 data can cause a denial of service via an infinite loop. The vulnerability is described across multiple connected sources (e.g., CBLMariner entries noting unzip
CVE-2015-7697: Undefined Security Weakness
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...
CVE-2015-7696: Improper Restriction of Operations within the Bounds of a Memory Buffer
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...
Info-ZIP UnZip Denial of Service Vulnerability
Info-ZIP UnZip is a set of Unix-based tools for decompressing the ".zip" file format. A security vulnerability in Info-ZIP UnZip allows an attacker to construct special files that can be parsed by an application, crashing the application or executing arbitrary code...
CVE-2015-7696
Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...