CVE-2015-1315

CVE-2015-1315 : Buffer overflow in Info-ZIP UnZip 6.10b (charset_to_intern in unix/unix.c) allows remote code execution via a crafted string, demonstrated by CP866→UTF-8 conversion. Public sources confirm the vulnerability and note that outside Brocade SANnav, updates to unzip packages address th...

CVE-2005-2475

The provided data confirms CVE-2005-2475: a race condition in unzip allows local users to modify permissions of arbitrary files via a hard link attack during decompression. This is evidenced by multiple advisories (RHSA-2007:0203, ELSA-2007-0203, CESA-2007:0203, CESAs for RHEL/CentOS) describing ...

CVE-2001-1268

CVE-2001-1268 is a directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier that allows overwriting arbitrary files during archive extraction via a .. in the extracted filename. Connected sources confirm the affected product is UnZip up to version 5.42 and earlier, with the basic issu...

CVE-2005-4667

CVE-2005-4667 is a vulnerability in the unzip utility where a buffer overflow can occur in command line argument handling (long filename) that could allow arbitrary code execution. The issue is reported in Unzip 5.50 and earlier and is exploitable when unzip processes crafted long file name argum...

CVE-2003-0282

CVE-2003-0282 affects UnZip 5.50 and earlier and is a directory traversal vulnerability where invalid characters placed between two '.' characters are filtered to produce a '..' sequence, allowing overwriting of arbitrary files during archive extraction. Public references in multiple advisories (...

CVE-2018-1000034

CVE-2018-1000034 affects Info-Zip UnZip 6.10c22, with an out-of-bounds read in UnZip that can cause a denial of service and allow reading of memory. Multiple connected sources confirm vulnerabilities in UnZip and indicate a fix to 6.10c23 (e.g., Mageia/MGASA-2018-0422, OSV-OSV-2018-0422, and rela...

CVE-2005-0602

CVE-2005-0602 affects unzip 5.51 and earlier, where extracting setuid/setgid files may not warn the user, enabling local privilege escalation. Multiple connected docs corroborate: Ubuntu USN-159-1 describes unzip vulnerability and remediation guidance; Mandrake MDKSA-2005:197 notes the issue and ...

CVE-2018-1000032

Info-Zip UnZip 6.10c22 has a heap-based buffer overflow (CVE-2018-1000032) that can cause a denial of service or potentially allow code execution. Public datasheets and multiple advisories confirm the issue and indicate a fix in 6.10c23. Mitigation: update to a version containing the fix (e.g., U...

CVE-2001-1269

CVE-2001-1269 affects Info-ZIP UnZip 5.42 and earlier. The vulnerability allows an attacker to overwrite arbitrary files during archive extraction by using filenames that begin with the slash character (/) in the ZIP archive. The issue is rooted in how the extractor handles archive filenames, ena...

CVE-2018-1000033

Info-Zip UnZip 6.10c22 is affected by CVE-2018-1000033 due to a heap-based/out-of-bounds access in ef_scan_for_stream, leading to denial of service and memory disclosure. The issue has been addressed in UnZip 6.10c23 (per Mageia/OpenVAS advisories). Upgrading to 6.10c23 or later is the recommende...

CVE-2018-1000031

Info-Zip UnZip, version up to 6.10c22, contains heap-based buffer overflow vulnerabilities that can cause denial of service or potentially allow code execution. Public sources (SEC Consult and related advisories) enumerate multiple CVEs (CVE-2018-1000031–CVE-2018-1000035) affecting UnZip, with fi...