CVE-2014-9913

CVE-2014-9913 refers to a buffer overflow in Info-Zip UnZip 6.0’s list_files function (list.c) that can crash the application via ZIP compression-method-related inputs. Connected records indicate unzip packages in various distros with patches or newer versions (e.g., Mariner entries noting patche...

CVE-2016-9844

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

CVE-2014-9913

Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via vectors related to the compression method...

CVE-2016-9844: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via a large compression method value in the central directory file header...

CVE-2014-9913: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the listfiles function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service crash via vectors related to the compression method...

Info-ZIP UnZip Buffer Overflow Vulnerability

Info-ZIP UnZip is an American software developer Greg Roelofs developed a set of Unix-based platform for the ".zip" file format for decompression tools. A buffer overflow vulnerability exists in Info-ZIP UnZip, where the program fails to perform sufficient bounds checking on user-submitted data,...

Info-ZIP UnZip 'zipinfo.c' Buffer Overflow Vulnerability

UnZip is Info-ZIP an extraction tool that realizes the compression format as .zip. Info-ZIP UnZip suffers from a remote buffer overflow vulnerability that stems from a failure to perform sufficient bounds checking on user input. An attacker could cause a denial of service by exploiting this...

PT-2016-3239

Name of the Vulnerable Software and Affected Versions Info-Zip Unzip version 6.0 Description The issue is caused by a buffer overflow in the zi short function, located in the zipinfo.c file of the Info-Zip Unzip file archiver. This buffer overflow occurs due to an out-of-bounds operation in memor...

PT-2016-3238

Name of the Vulnerable Software and Affected Versions Info-ZIP Unzip version 6.0 Description The issue is caused by a buffer overflow in the list files function, located in list.c, which can be exploited by a remote attacker to cause a denial of service through vectors related to the compression...

UnZip: Multiple vulnerabilities

Background Info-ZIP’s UnZip is a tool to list and extract files inside PKZIP compressed files. Description Multiple vulnerabilities were found in UnZip. Please review the referenced CVE’s for additional information. Impact Remote attackers could execute arbitrary code or cause Denial of Service...

CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

AZL-6939 CVE-2015-7697 affecting package unzip for versions less than 6.0-19

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

CVE-2015-7696

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

CVE-2015-7696

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

CVE-2015-7697

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

CVE-2015-7696: Improper Restriction of Operations within the Bounds of a Memory Buffer

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value...

CVE-2015-7697: Undefined Security Weakness

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in a ZIP archive...

Info-ZIP UnZip Denial of Service Vulnerability

Info-ZIP UnZip is a set of Unix-based tools for decompressing the ".zip" file format. A security vulnerability in Info-ZIP UnZip allows an attacker to construct special files that can be parsed by an application, crashing the application or executing arbitrary code...