unzip vulnerabilities

2015-02-1700:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.5

Confidence

High

EPSS

0.063

Percentile

93.7%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

unzip - De-archiver for .zip files

Details

William Robinet discovered that unzip incorrectly handled certain
malformed zip archives. If a user or automated system were tricked into
processing a specially crafted zip archive, an attacker could possibly
execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchunzip< 6.0-12ubuntu1.3UNKNOWN
Ubuntu14.04noarchunzip< 6.0-9ubuntu1.3UNKNOWN
Ubuntu12.04noarchunzip< 6.0-4ubuntu2.3UNKNOWN