An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Max CVSS
9.1
EPSS Score
0.22%
Published
2018-02-09
Updated
2018-02-26
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive memory.
Max CVSS
9.1
EPSS Score
0.15%
Published
2018-02-09
Updated
2018-02-26
A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution.
Max CVSS
7.8
EPSS Score
0.13%
Published
2018-02-09
Updated
2020-08-24
A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution.
Max CVSS
7.8
EPSS Score
0.13%
Published
2018-02-09
Updated
2020-08-24
Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8.
Max CVSS
7.5
EPSS Score
6.33%
Published
2015-02-23
Updated
2015-02-24
Wiz 5.0.3 has a user mode write access violation
Max CVSS
7.5
EPSS Score
0.19%
Published
2020-01-27
Updated
2020-01-31
The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.
Max CVSS
9.3
EPSS Score
7.19%
Published
2008-03-17
Updated
2018-10-15
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
Max CVSS
6.2
EPSS Score
0.04%
Published
2005-05-02
Updated
2016-10-18
Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.
Max CVSS
10.0
EPSS Score
17.50%
Published
2005-03-01
Updated
2018-10-03
9 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!