unzip -- input sanitization errorsentered 2015-01-16
no CVE referenced
CVE details
CVE-2014-8139
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
- Score
- 7.8 high
- Published
- 2020-01-31
- Links
- NVD · cve.org · Report wrong data
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| archivers/unzip | unzip | 6.0_8 | fixed | ehaupt@FreeBSD.org |