CVE-2018-1000032

Description

References

• sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html · Third Party Advisory

More vulnerabilities in unzip

• CVE-2018-1000034CRITICAL 9.1An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive mem…
• CVE-2018-1000033CRITICAL 9.1An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service and read sensitive mem…
• CVE-2018-1000031HIGH 7.8A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly …
• CVE-2015-1315HIGH 7.5Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code v…
• CVE-2005-4667LOW 3.7Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument…