Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-0888
HistoryMar 17, 2008 - 9:44 p.m.

CVE-2008-0888

2008-03-1721:44:00
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.6 High

AI Score

Confidence

High

0.072 Low

EPSS

Percentile

94.0%

JSON

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

Affected configurations

NVD
Node
info-zipunzip

References

Related

openvas 18
seebug 1
nessus 11
securityvulns 5
cve 1
prion 1
redhat 1
debian 1
cbl_mariner 3
debiancve 1
cvelist 1
osv 1
ubuntu 1
ubuntucve 1
centos 2
gentoo 1
vmware 2
threatpost 1
openvas
openvas
Mandriva Update for unzip MDVSA-2008:068 (unzip)
2009-04-09 00:00:00
CentOS Update for unzip CESA-2008:0196 centos3 x86_64
2009-02-27 00:00:00
CentOS Update for unzip CESA-2008:0196 centos3 i386
2009-02-27 00:00:00
seebug
seebug
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
2008-03-20 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: unzip (CVE-2008-0888)
2024-07-02 00:00:00
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
2008-03-19 00:00:00
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
2008-04-11 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:00:00
unzip code execution
2008-03-18 00:00:00
rPSA-2008-0116-1 unzip
2008-03-23 00:00:00
cve
cve
CVE-2008-0888
2008-03-17 21:44:00
prion
prion
Design/Logic Flaw
2008-03-17 21:44:00
redhat
redhat
(RHSA-2008:0196) Moderate: unzip security update
2008-03-18 00:00:00
debian
debian
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-17 20:03:43
cbl_mariner
cbl_mariner
CVE-2008-0888 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
CVE-2008-0888 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
debiancve
debiancve
CVE-2008-0888
2008-03-17 21:44:00
cvelist
cvelist
CVE-2008-0888
2008-03-17 21:00:00
osv
osv
unzip - potential code execution
2008-03-17 00:00:00
ubuntu
ubuntu
unzip vulnerability
2008-03-20 00:00:00
ubuntucve
ubuntucve
CVE-2008-0888
2008-03-17 00:00:00
centos
centos
unzip security update
2008-03-18 20:50:20
unzip security update
2008-03-18 22:50:34
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2008-04-06 00:00:00
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues
2008-06-04 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9.6 High

AI Score

Confidence

High

0.072 Low

EPSS

Percentile

94.0%

JSON
Related for NVD:CVE-2008-0888
openvas18seebug1nessus11securityvulns5cve1prion1redhat1debian1cbl_mariner3debiancve1cvelist1osv1ubuntu1ubuntucve1centos2gentoo1vmware2threatpost1