Lucene search
UbuntuUSN-2502-1HistoryFeb 17, 2015 - 12:00 a.m.
unzip vulnerabilities
2015-02-1700:00:00
ubuntu.com
29
9.5 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.063 Low
EPSS
Percentile
93.6%
Releases
- Ubuntu 14.10
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- unzip - De-archiver for .zip files
Details
William Robinet discovered that unzip incorrectly handled certain
malformed zip archives. If a user or automated system were tricked into
processing a specially crafted zip archive, an attacker could possibly
execute arbitrary code.
References
Related
ubuntucve
ubuntucve
CVE-2015-1315
2015-02-17 00:00:00
cve
cve
CVE-2015-1315
2015-02-23 17:59:00
broadcom
broadcom
nessus
nessus
FreeBSD : unzip -- heap based buffer overflow in iconv patch (3680b234-b6f0-11e4-b7cc-d050992ecde8)
2015-02-18 00:00:00
Ubuntu 14.04 LTS : unzip vulnerabilities (USN-2502-1)
2015-02-18 00:00:00
securityvulns
securityvulns
[USN-2502-1] unzip vulnerabilities
2015-02-22 00:00:00
UnZip multiple security vulnerabilities
2015-02-22 00:00:00
freebsd
freebsd
unzip -- heap based buffer overflow in iconv patch
2015-02-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2502-1)
2015-02-18 00:00:00
Mageia: Security Advisory (MGASA-2018-0422)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2015-1315
2015-02-23 17:59:00
prion
prion
Buffer overflow
2015-02-23 17:59:00
mageia
mageia
Updated unzip packages fix security vulnerabilities
2018-10-30 21:01:43
packetstorm
packetstorm
InfoZip UnZip 6.00 / 6.1c22 Buffer Overflow
2018-02-07 00:00:00
9.5 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.063 Low
EPSS
Percentile
93.6%
Related for USN-2502-1