Vulnerabilities in Info-ZIP
4 resultsCVE-2014-8140—Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary codeEPSS 7.4%CVE-2014-8139—Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code viaEPSS 7.4%CVE-2014-8141—Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code EPSS 7.4%CVE-2008-0888—The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackerEPSS 6.3%