CVE-2014-8140

Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.

Affected products

Alt Linux, Centos, Red Hat, Suse, Ubuntu, Unzip

Unzip Project Unzip

≤ 6.0

CVSS 3.1

7.8 HIGH

EPSS

7.4% (94th percentile)

Weakness

CWE-787

NVD status

Modified

Published

2020-01-31