CPE Details
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:info-zip:unzip:5.52:*:*:*:*:*:*:*
Informations
Vendor
info-zipProduct
unzipVersion
5.52Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data. | 9.3 |
|||
| Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete. | 1.2 |
2025©
tesweb SA
