Known vulnerabilities in UnZip

Known vulnerabilities in UnZip

Vendor: Info-ZIP

Software: UnZip

Software CPE: cpe:2.3:a:info-zip:unzip:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 19

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU95338 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2001-1268	CWE-22	Low	No	No	-	05.08.2024	SB2001071202 SB2024080589
#VU95179 - Insufficient UI Warning of Dangerous Operations CVE-2005-0602	CWE-357	Low	No	No	5.52	02.08.2024	SB2005050205 SB2024080237 SB2024080589
#VU68298 - NULL Pointer Dereference CVE-2021-4217	CWE-476	Medium	No	No	-	13.10.2022	SB2022101330 SB2022101331 SB2022101401 and 6 more
#VU66220 - Out-of-bounds write CVE-2022-0529	CWE-787	High	Available	No	-	09.08.2022	SB2022021022 SB2022080921 SB2022092657 and 13 more
#VU63289 - Heap-based Buffer Overflow CVE-2022-0530	CWE-122	High	Available	No	-	17.05.2022	SB2022021022 SB2022051701 SB2022051702 and 16 more
#VU57976 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2005-2475	CWE-362	Low	No	No	5.53	08.11.2021	SB2005080501 SB2021110802
#VU29255 - Resource exhaustion CVE-2019-13232	CWE-400	Medium	No	No	-	25.06.2020	SB2019070410 SB2020032673 SB2020032675 and 5 more
#VU33146 - Heap-based Buffer Overflow CVE-2014-8141	CWE-122	Medium	No	No	6.10 b	01.02.2020	SB2020020109 SB2018082027 SB2015041612 and 4 more
#VU33144 - Heap-based Buffer Overflow CVE-2014-8139	CWE-122	Medium	No	No	6.10 b	31.01.2020	SB2020013126 SB2018082025 SB2015041612 and 4 more
#VU33145 - Heap-based Buffer Overflow CVE-2014-8140	CWE-122	Medium	No	No	6.10 b	31.01.2020	SB2020013127 SB2018082026 SB2015041612 and 4 more
#VU18051 - Improper input validation CVE-2016-9844	CWE-20	Medium	No	No	-	21.03.2019	SB2019032104 SB2018100513 SB2018082032 and 4 more
#VU36542 - Memory corruption CVE-2018-18384	CWE-119	Medium	No	No	-	16.10.2018	SB2018101617 SB2019040247 SB2019030122 and 3 more
#VU37549 - Memory corruption CVE-2018-1000031	CWE-119	High	No	No	-	10.02.2018	SB2018021006 SB2018022614
#VU37550 - Memory corruption CVE-2018-1000032	CWE-119	High	No	No	-	10.02.2018	SB2018021006 SB2018022614
#VU37551 - Out-of-bounds read CVE-2018-1000033	CWE-125	High	No	No	-	10.02.2018	SB2018021006 SB2018022614
#VU37552 - Out-of-bounds read CVE-2018-1000034	CWE-125	High	No	No	-	10.02.2018	SB2018021006
#VU33147 - Memory corruption CVE-2014-9913	CWE-119	Low	No	No	6.10 b	18.01.2017	SB2017011810 SB2018100513 SB2018082029 and 1 more
#VU33149 - Resource Management Errors CVE-2015-7697	CWE-399	Medium	No	No	6.10 b	06.11.2015	SB2015110602 SB2018100513 SB2018082031
#VU33148 - Out-of-bounds read CVE-2015-7696	CWE-125	Medium	No	No	6.10 b	06.11.2015	SB2015110601 SB2018100513 SB2018082030