| Vulnerability Name: | CVE-2015-1315 (CCN-101067) | ||||||||||||
| Assigned: | 2015-02-17 | ||||||||||||
| Published: | 2015-02-17 | ||||||||||||
| Updated: | 2015-02-24 | ||||||||||||
| Summary: | Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8. | ||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||
| References: | Source: MITRE Type: CNA CVE-2015-1315 Source: CCN Type: oss-security Mailing List, Tue, 17 Feb 2015 19:29:51 +0100 CVE-2015-1315 - Info-ZIP UnZip - Out-of-bounds Write Source: MISC Type: UNKNOWN http://www.conostix.com/pub/adv/CVE-2015-1315-Info-ZIP-unzip-Out-of-bounds_Write.txt Source: CCN Type: Info-ZIP Web site Info-ZIP's UnZip Source: MLIST Type: UNKNOWN [oss-security] 20150217 CVE-2015-1315 - Info-ZIP UnZip - Out-of-bounds Write Source: CCN Type: BID-72642 Info-ZIP UnZip CVE-2015-1315 Out of Bounds Write Heap Buffer Overflow Vulnerability Source: UBUNTU Type: Patch, Vendor Advisory USN-2502-1 Source: MISC Type: UNKNOWN https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/580961/comments/120 Source: XF Type: UNKNOWN unzip-cve20151315-bo(101067) Source: CCN Type: WhiteSource Vulnerability Database CVE-2015-1315 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||