CVE-2014-8141: Buffer Overflow
Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
Other sources
oCERT reports an unzip flaw discovered by Michele Spagnuolo, Google Security Team:
""" The read errors show problems in process.c:getZip64Data(), which lacked any error detection or reporting, and was trying to extract multi-byte data from a buffer which did not contain enough bytes.
Proposed changes:
http://antinode.info/ftp/info-zip/unzip60/fileio.c fileio.c:dostring() looks at the status value returned from process.c:getZip64Data(), and puts out a new warning. http://antinode.info/ftp/info-zip/unzip60/process.c process.c:getZip64Data() gets new validity tests, and it returns a useful status value. """
Acknowledgement:
Red Hat would like to thank oCERT for reporting these issues. oCERT acknowledges Michele Spagnuolo of the Google Security Team as the original reporter.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8141?
CVE-2014-8141 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2014-8141?
To fix CVE-2014-8141, upgrade to a version of Info-ZIP UnZip later than 6.0 that addresses this vulnerability.
Which software is affected by CVE-2014-8141?
CVE-2014-8141 affects Info-ZIP UnZip 6.0 and earlier versions, as well as several Red Hat Enterprise Linux versions.
Can CVE-2014-8141 be exploited remotely?
Yes, CVE-2014-8141 can be exploited remotely via a crafted zip file when using the -t command argument.
What type of vulnerability is CVE-2014-8141?
CVE-2014-8141 is classified as a heap-based buffer overflow vulnerability.