CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4667

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.031

EPSS Ranking 86.4%

CVSS Severity

CVSS v2 Score 3.7

References

Products affected by CVE-2005-4667

Info-Zip » Unzip » Version: 5.2

cpe:2.3:a:info-zip:unzip:5.2
Info-Zip » Unzip » Version: 5.3

cpe:2.3:a:info-zip:unzip:5.3
Info-Zip » Unzip » Version: 5.31

cpe:2.3:a:info-zip:unzip:5.31
Info-Zip » Unzip » Version: 5.32

cpe:2.3:a:info-zip:unzip:5.32
Info-Zip » Unzip » Version: 5.40

cpe:2.3:a:info-zip:unzip:5.40
Info-Zip » Unzip » Version: 5.41

cpe:2.3:a:info-zip:unzip:5.41
Info-Zip » Unzip » Version: 5.42

cpe:2.3:a:info-zip:unzip:5.42
Info-Zip » Unzip » Version: 5.50

cpe:2.3:a:info-zip:unzip:5.50

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4667

Products

Pricing

Contact Us