Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2014-9913

Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.

VectorLOCAL

PublishedJan 18, 2017, 17:59

Published Bycve@mitre.org

Base Score

Score4

Affected Versions

No affected versions found.

References

http://www.openwall.com/lists/oss-security/2014/11/03/5
http://www.openwall.com/lists/oss-security/2016/12/05/13
http://www.openwall.com/lists/oss-security/2016/12/05/19
http://www.openwall.com/lists/oss-security/2016/12/05/20
http://www.securityfocus.com/bid/95081
https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1643750

Weakness Type

CWE-119

CVSS Metrics

Base Score

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base SeverityMedium

Version

3.0

Attack Vector (AV)

LOCAL