CVE-2014-8139

Description

References

• ocert.org/advisories/ocert-2014-011.html · Third Party Advisory
• securitytracker.com/id/1031433 · Third Party Advisory
• access.redhat.com/errata/RHSA-2015:0700 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

unzip 的其他漏洞

• CVE-2020-36561严重 9.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar…
• CVE-2021-4217低危 3.3A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereferenc…
• CVE-2022-0530中危 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2022-0529中危 5.5A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-…
• CVE-2014-8141高危 7.8Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code …