Lucene search
GoogleOSV:DSA-1522-1HistoryMar 17, 2008 - 12:00 a.m.
unzip - potential code execution
2008-03-1700:00:00
Google
osv.dev
10
0.072 Low
EPSS
Percentile
94.0%
Tavis Ormandy discovered that unzip, when processing specially crafted
ZIP archives, could pass invalid pointers to the C library’s free
routine, potentially leading to arbitrary code execution
(CVE-2008-0888).
For the old stable distribution (sarge), this problem has been fixed
in version 5.52-1sarge5.
For the stable distribution (etch), this problem has been fixed in
version 5.52-9etch1.
The unstable distribution (sid) will be fixed soon.
We recommend that you upgrade your unzip package.
References
Related
openvas
openvas
Mandriva Update for unzip MDVSA-2008:068 (unzip)
2009-04-09 00:00:00
CentOS Update for unzip CESA-2008:0196 centos3 x86_64
2009-02-27 00:00:00
CentOS Update for unzip CESA-2008:0196 centos3 i386
2009-02-27 00:00:00
nvd
nvd
CVE-2008-0888
2008-03-17 21:44:00
seebug
seebug
Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞
2008-03-20 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: unzip (CVE-2008-0888)
2024-07-02 00:00:00
RHEL 2.1 / 3 : unzip (RHSA-2008:0196)
2008-03-19 00:00:00
GLSA-200804-06 : UnZip: User-assisted execution of arbitrary code
2008-04-11 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-18 00:00:00
unzip code execution
2008-03-18 00:00:00
rPSA-2008-0116-1 unzip
2008-03-23 00:00:00
cve
cve
CVE-2008-0888
2008-03-17 21:44:00
prion
prion
Design/Logic Flaw
2008-03-17 21:44:00
redhat
redhat
(RHSA-2008:0196) Moderate: unzip security update
2008-03-18 00:00:00
debian
debian
[SECURITY] [DSA 1522-1] New unzip packages fix potential code execution
2008-03-17 20:03:43
cbl_mariner
cbl_mariner
CVE-2008-0888 affecting package unzip for versions less than 6.0-20
2024-03-19 17:21:46
CVE-2008-0888 affecting package unzip 6.0-19
2020-10-08 18:09:51
CVE-2008-0888 affecting package unzip for versions less than 6.0-19
2022-04-09 06:51:51
debiancve
debiancve
CVE-2008-0888
2008-03-17 21:44:00
cvelist
cvelist
CVE-2008-0888
2008-03-17 21:00:00
ubuntu
ubuntu
unzip vulnerability
2008-03-20 00:00:00
ubuntucve
ubuntucve
CVE-2008-0888
2008-03-17 00:00:00
centos
centos
unzip security update
2008-03-18 20:50:20
unzip security update
2008-03-18 22:50:34
gentoo
gentoo
UnZip: User-assisted execution of arbitrary code
2008-04-06 00:00:00
vmware
vmware
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44