CVE-2014-8139

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.

Affected products

Alt Linux, Centos, Info-Zip Unzip, Red Hat, Suse, Ubuntu

Unzip Project Unzip

≤ 6.0

CVSS 3.1

7.8 HIGH

EPSS

7.4% (94th percentile)

Weakness

CWE-787

NVD status

Modified

Published

2020-01-31