CVE-2005-4667 in UnZipinfo

Summary

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/25/2006

Disclosure

12/31/2005

CPE

ready

Exploit

Download

CVSS

5.9

EPSS

0.03134

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!