PT-2014-8430 · Info Zip +5 · Unzip +5

Name of the Vulnerable Software and Affected Versions: Info-ZIP UnZip versions 6.0 and earlier Description: A heap-based buffer overflow in the test compr eb function allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command. This iss...

CVE-2014-8140

Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command...

Info-ZIP UnZip 5.x File Name Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15968/info Info-ZIP 'unzip' is susceptible to a filename buffer-overflow vulnerability. The application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. This...

Info-ZIP UnZip 5.50 Encoded Character Hostile Destination Path Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7550/info Info-ZIP UnZip contains a vulnerability during the handling of pathnames for archived files. Specifically, when certain encoded characters are inserted into '../' directory traversal sequences, the creator of th...

FreeBSD Ports: zip

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞

BUGTRAQ ID: 28288 CVECAN ID: CVE-2008-0888 unzip是在Unix下对.zip文件格式进行解压的工具。 unzip的实现上存在漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档提升权限。...

Info-ZIP UnZip 5.x - File Name Buffer Overflow

Info-ZIP UnZip 5.x - File Name Buffer Overflow // source: https://www.securityfocus.com/bid/15968/info Info-ZIP 'unzip' is susceptible to a filename buffer-overflow vulnerability. The application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memo...

Info-ZIP UnZip 5.x - File Name Buffer Overflow

// source: https://www.securityfocus.com/bid/15968/info Info-ZIP 'unzip' is susceptible to a filename buffer-overflow vulnerability. The application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. This issue allows attackers to execu...

Oracle OraClient Component Insecure Installation Issue

Secunia Advisory: SA16577 Release Date: 2005-09-06 Critical: Less critical Impact: System access Where: From remote Solution Status: Unpatched Software: Oracle Database Server 10g Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: Harr...

FreeBSD : zip -- long path buffer overflow (40549bbf-43b5-11d9-a9e7-0001020eed82)

A HexView security advisory reports : When zip performs recursive folder compression, it does not check for the length of resulting path. If the path is too long, a buffer overflow occurs leading to stack corruption and segmentation fault. It is possible to exploit this vulnerability by embedding...

DEBIAN-CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

security flaw

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

CVE-2004-1010 maps to a buffer overflow in Info-Zip zip (v2.3 and possibly earlier) when recursively creating archives with very long pathnames, enabling remote code execution via a crafted ZIP. Connected advisories (Ubuntu USN-18-1, Debian DSA-624-1, Gentoo GLSA 200411-16, FreeBSD/OpenVAS entrie...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

CVE-2004-1010: Undefined Security Weakness

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname...

[Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zip/Linux long path buffer overflow Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200411031 URL: http://www.hexview.com/docs/20041103-1.txt Overview: ========= Zip console application by Info-Zip http://www.info-zip.org is an...