Unrated severityNVD Advisory· Published Jan 31, 2020· Updated Aug 6, 2024
CVE-2014-8140
CVE-2014-8140
Description
Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows remote attackers to execute arbitrary code via a crafted zip file in the -t command argument to the unzip command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
4- www.ocert.org/advisories/ocert-2014-011.htmlmitrex_refsource_MISC
- www.securitytracker.com/id/1031433mitrex_refsource_MISC
- access.redhat.com/errata/RHSA-2015:0700mitrex_refsource_MISC
- bugzilla.redhat.com/show_bug.cgimitrex_refsource_MISC
News mentions
0No linked articles in our index yet.