CVE-2015-7697

Description

References

• sourceforge.net/p/infozip/patches/23
• debian.org/security/2015/dsa-3386
• openwall.com/lists/oss-security/2015/09/07/4
• openwall.com/lists/oss-security/2015/09/15/6
• openwall.com/lists/oss-security/2015/10/11/5
• securityfocus.com/bid/76863
• securitytracker.com/id/1034027
• ubuntu.com/usn/USN-2788-1
• ubuntu.com/usn/USN-2788-2

unzip의 다른 취약점

• CVE-2020-36561심각 9.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar…
• CVE-2021-4217낮음 3.3A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereferenc…
• CVE-2022-0530보통 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2022-0529보통 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2014-8141높음 7.8Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code …