Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2008-0888
HistoryMar 17, 2008 - 12:00 a.m.

CVE-2008-0888

2008-03-1700:00:00
ubuntu.com
ubuntu.com
13

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip
can be invoked using invalid buffers, which allows remote attackers to
cause a denial of service (crash) and possibly execute arbitrary code via
unknown vectors that trigger a free of uninitialized or previously-freed
data.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchunzip< 5.52-6ubuntu4.1UNKNOWN
ubuntu6.10noarchunzip< 5.52-8ubuntu1.1UNKNOWN
ubuntu7.04noarchunzip< 5.52-9ubuntu3.1UNKNOWN
ubuntu7.10noarchunzip< 5.52-10ubuntu1.1UNKNOWN

Related

openvas 18
redhat 1
nessus 10
prion 1
cve 1
securityvulns 5
seebug 1
osv 1
ubuntu 1
cbl_mariner 3
debian 1
debiancve 1
centos 2
gentoo 1
vmware 2
threatpost 1
openvas
openvas
Mandriva Update for unzip MDVSA-2008:068 (unzip)
2009-04-09 00:00:00
Ubuntu: Security Advisory (USN-589-1)
2009-03-23 00:00:00
CentOS Update for unzip CESA-2008:0196 centos3 x86_64
2009-02-27 00:00:00
redhat
redhat
(RHSA-2008:0196) Moderate: unzip security update
2008-03-18 00:00:00
nessus
nessus
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
2008-03-19 00:00:00
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
2008-04-11 00:00:00
Scientific Linux Security Update : unzip on SL3.x i386/x86_64
2012-08-01 00:00:00
prion
prion
Design/Logic Flaw
2008-03-17 21:44:00
cve
cve
CVE-2008-0888
2008-03-17 21:44:00
securityvulns
securityvulns
unzip code execution
2008-03-18 00:00:00
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:00:00
rPSA-2008-0116-1 unzip
2008-03-23 00:00:00
seebug
seebug
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
2008-03-20 00:00:00
osv
osv
unzip - potential code execution
2008-03-17 00:00:00
ubuntu
ubuntu
unzip vulnerability
2008-03-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2008-0888 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
debian
debian
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:01:39
debiancve
debiancve
CVE-2008-0888
2008-03-17 21:44:00
centos
centos
unzip security update
2008-03-18 22:50:34
unzip security update
2008-03-18 20:50:20
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2008-04-06 00:00:00
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.072 Low

EPSS

Percentile

94.0%

JSON
Related for UB:CVE-2008-0888
openvas18redhat1nessus10prion1cve1securityvulns5seebug1osv1ubuntu1cbl_mariner3debian1debiancve1centos2gentoo1vmware2threatpost1