#VU13614 Heap-based buffer overflow in UnZip - CVE-2018-1000035


Vulnerability identifier: #VU13614

Vulnerability risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2018-1000035

CWE-ID: CWE-122

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
UnZip
Client/Desktop applications / Software for archiving

Vendor: Info-ZIP

Description

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.
The weakness exists due to heap-based buffer overflow in the processing of password-protected archives. A remote attacker can trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.

Mitigation
Install update from vendor's website.

Vulnerable software versions

UnZip: 6.0

External links
https://infozip.sourceforge.net/phpBB3/viewtopic.php?f=7&t=450

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Gentoo update for UnZip
Slackware Linux update for infozip
OpenSUSE Linux update for unzip
Heap-based buffer overflow in unzip (Alpine package)
OpenSUSE Linux update for unzip