PT-2015-7584

Name of the Vulnerable Software and Affected Versions Info-ZIP UnZip version 6.0 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by including empty bzip2 data in a ZIP archive. Recommendations For Info-ZIP UnZip versi...

UBUNTU-CVE-2015-7696

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

PT-2015-7583

Name of the Vulnerable Software and Affected Versions Info-ZIP UnZip version 6.0 Description The issue allows remote attackers to cause a denial of service, which is a heap-based buffer over-read and application crash, or possibly execute arbitrary code. This can be achieved via a crafted...

Unzip Extra Field Uncompressed Size Buffer Overflow (CVE-2014-9636)

A buffer overflow vulnerability exists in Info-ZIP UnZip tool. The vulnerability is due to insufficient bounds checking on user-supplied input while handling ZIP files. A remote unauthenticated attacker can exploit these vulnerabilities by enticing a target user to open a crafted ZIP archive with...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

Buffer overflow

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

CVE-2015-1315

CVE-2015-1315 : Buffer overflow in Info-ZIP UnZip 6.10b (charset_to_intern in unix/unix.c) allows remote code execution via a crafted string, demonstrated by CP866→UTF-8 conversion. Public sources confirm the vulnerability and note that outside Brocade SANnav, updates to unzip packages address th...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

CVE-2015-1315: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

CVE-2015-1315

Buffer overflow in the charsettointern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8...

Info-ZIP UnZip Out-of-Bounds Write Heap Buffer Overflow Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP The UnZip testcompreb function is vulnerable to an out-of-bounds write heap buffer overflow that allows attackers to construct malicious files that can be tricked into parsing by the user, crashing the application...

Info-ZIP UnZip Out-of-Bounds Read Heap Buffer Overflow Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP The UnZip getZip64Data function is vulnerable to an out-of-bounds read heap buffer overflow, which allows an attacker to construct a malicious file that can be tricked into being parsed by the user, crashing the applicati...

Info-ZIP UnZip Out-of-Bounds Denial of Service Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP UnZi has a denial of service vulnerability that allows attackers to crash an application, resulting in a denial of service...

UBUNTU-CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

UBUNTU-CVE-2014-8141

Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

PT-2014-8429 · Info Zip +5 · Info-Zip Unzip +5

Name of the Vulnerable Software and Affected Versions: Info-ZIP UnZip versions 6.0 and earlier Description: A heap-based buffer overflow issue exists in the CRC32 verification of Info-ZIP UnZip, allowing remote attackers to execute arbitrary code via a crafted zip file. This can be achieved by...

PT-2014-8430 · Info Zip +5 · Unzip +5

Name of the Vulnerable Software and Affected Versions: Info-ZIP UnZip versions 6.0 and earlier Description: A heap-based buffer overflow in the test compr eb function allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command. This iss...

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...