Debian/unzip: high 7.8
Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip
Action: Upgrade unzip to 6.0-16 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0-16 | - |
Fixed versions
| 6.0-16 |
Sources
published · modified · JSON