CVE-2005-4667: Buffer Overflow
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4667?
CVE-2005-4667 has a low severity rating due to its requirement for user-assisted exploitation.
How does CVE-2005-4667 allow code execution?
CVE-2005-4667 allows attackers to execute arbitrary code by triggering a buffer overflow through a long filename argument.
Which versions of UnZip are affected by CVE-2005-4667?
CVE-2005-4667 affects UnZip versions 5.31 and earlier, including 5.50.
How can I mitigate the vulnerability described in CVE-2005-4667?
To mitigate CVE-2005-4667, avoid using affected versions of UnZip and ensure that long filename arguments are not passed.
What types of systems are at risk from CVE-2005-4667?
Systems using vulnerable versions of UnZip that are exposed to user-provided input may be at risk from CVE-2005-4667.