Known vulnerabilities in UnZip 5.3

Vendor: Info-ZIP
Software: UnZip
Version: 5.3
Software CPE: cpe:2.3:a:info-zip:unzip:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting UnZip version 5.3 UnZip 5.3 is affected by 6 vulnerabilities: 2 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95338 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2001-1268		 CWE-22 Low
No
No
 - 05.08.2024 SB2001071202
SB2024080589
#VU95179 - Insufficient UI Warning of Dangerous Operations
CVE-2005-0602		 CWE-357 Low
No
No
 5.52 02.08.2024 SB2005050205
SB2024080237
SB2024080589
#VU68298 - NULL Pointer Dereference
CVE-2021-4217		 CWE-476 Medium
No
No
 Not fixed 13.10.2022 SB2022101330
SB2022101331
SB2022101401
and 6 more
#VU66220 - Out-of-bounds write
CVE-2022-0529		 CWE-787 High
Public exploit available
No
 Not fixed 09.08.2022 SB2022021022
SB2022080921
SB2022092657
and 13 more
#VU63289 - Heap-based Buffer Overflow
CVE-2022-0530		 CWE-122 High
Public exploit available
No
 Not fixed 17.05.2022 SB2022021022
SB2022051701
SB2022051702
and 16 more
#VU29255 - Resource exhaustion
CVE-2019-13232		 CWE-400 Medium
No
No
 Not fixed 25.06.2020 SB2019070410
SB2020032673
SB2020032675
and 5 more