CVE-2014-8140

Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip…

published January 31, 2020

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07448 · 94.4th percentile
Published
2020-01-31T22:00Z
EPSS history
Timeline
  • 31 JAN 22:00Z
    Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip…
    cvelistv5