info-zip vulnerabilities

4 published CVEs name info-zip among the affected products.

Critical 0High 4Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2014-8141
Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip…
Info-ZIP · UnZip
High7.8
CVE-2014-8140
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip…
Info-ZIP · UnZip
High7.8
CVE-2014-8139
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file…
Info-ZIP · UnZip
High7.8
CVE-2008-0888
The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial…
info-zip · unzip
High9.3