CVE-2014-8140: Buffer Overflow
Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
Other sources
oCERT reports an unzip flaw discovered by Michele Spagnuolo, Google Security Team:
""" The write error shows a problem in extract.c:testcompreb(), which was not expecting an uncompressed size of zero for an EFNTSD extra block.
Proposed changes:
http://antinode.info/ftp/info-zip/unzip60/extract.c
extract.c:testcompreb() gets a new validity test. """
Acknowledgement:
Red Hat would like to thank oCERT for reporting these issues. oCERT acknowledges Michele Spagnuolo of the Google Security Team as the original reporter.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2014-8140?
CVE-2014-8140 is a heap-based buffer overflow vulnerability in Info-ZIP UnZip 6.0 and earlier.
What is the severity of CVE-2014-8140?
The severity of CVE-2014-8140 is high with a CVSS score of 7.8.
How does CVE-2014-8140 allow attackers to execute arbitrary code?
CVE-2014-8140 allows remote attackers to execute arbitrary code by exploiting the buffer overflow through a crafted zip file in the -t command argument to the unzip command.
Which versions of UnZip are affected by CVE-2014-8140?
UnZip 6.0 and earlier versions are affected by CVE-2014-8140.
Where can I find more information about CVE-2014-8140?
You can find more information about CVE-2014-8140 in the following references: [ocert.org](http://www.ocert.org/advisories/ocert-2014-011.html), [securitytracker.com](http://www.securitytracker.com/id/1031433), [access.redhat.com](https://access.redhat.com/errata/RHSA-2015:0700).