CVE-2014-8139

7.8

HIGHCVSS v3

Published

January 31, 2020

CVSS v2

6.8 MEDIUM

Affected

3 projects

Assigned by

Red Hat

Severity scale

010

Description

Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.

unzip

NPMUnzip cross-platform streaming API compatible with fstream and fs.ReadStream

<= 6.0NVD

@types/unzip

NPMTypeScript definitions for unzip

<= 6.0NVD

yi-ge/unzip

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Golang *.zip decompress.

<= 6.0NVD

Security Advisories

CVE-2014-8139

Description

More on this CVE