CVE-2014-9636

Michal Zalewski discovered that unzip incorrectly handled certain malformed zip archives If a user or automated system were tricked into processing a specially crafted zip archive, an attacker could possibly execute arbitrary code ...

A flaw was found in the test_compr_eb() function allowing out-of-bounds read and write access to memory locations By carefully crafting a corrupt ZIP archive an attacker can trigger a heap overflow, resulting in application crash or possibly having other unspecified impact For the stable distribution (wheezy), this problem has been fixed in versi ...

Debian Bug report logs - #776589 unzip: CVE-2014-9636 heap overflow via mismatched block sizes Package: unzip; Maintainer for unzip is Santiago Vila <sanvila@debianorg>; Source for unzip is src:unzip (PTS, buildd, popcon) Reported by: Marc Deslauriers <marcdeslauriers@ubuntucom> Date: Thu, 29 Jan 2015 16:54:02 UTC ...

Debian Bug report logs - #847485 unzip: CVE-2014-9913: buffer overflow in "unzip -l" via list_files() in listc Package: src:unzip; Maintainer for src:unzip is Santiago Vila <sanvila@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 8 Dec 2016 16:33:08 UTC Severity: important Tags: securi ...

Debian Bug report logs - #847486 unzip: CVE-2016-9844: zipinfo buffer overflow Package: src:unzip; Maintainer for src:unzip is Santiago Vila <sanvila@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 8 Dec 2016 16:36:01 UTC Severity: important Tags: security, upstream Found in version un ...

A buffer overflow was found in the way unzip uncompressed certain extra fields of a file A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive was tested with unzip's '-t' option (CVE-2014-9636) A buffer overflow flaw was found in the way unzip computed the CRC32 checksum of certain extra ...

A buffer overflow was found in the way unzip uncompressed certain extra fields of a file A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive was tested with unzip's '-t' option ...