CVE-2014-9913

Published: Jan 18, 2017Modified: May 13, 2026

4.0

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.5 / Impact: 1.4

Source: NVD

Description

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.

Affected (1)

Products: Unzip Project: Unzip

Unzip Project

1 product

Unzip

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Unzip Project Unzip	Version 6.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://www.openwall.com/lists/oss-security/2014/11/03/5

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/13

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/19

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/20

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/95081

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/11/03/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/13

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/19

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/05/20

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/95081

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.