Approved changes feed: RSS · Atom

cpe:2.3:a:info-zip:unzip:6.10b:*:*:*:*:*:*:*

part: a version: 6.10b update: *

VendorInfo Zip (1e221f8a-4d44-5634-b451-4c9ee6580569)
ProductUnzip (3e193c2f-9a45-513a-889c-7cef0809d028)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/unzip purl2cpe 2026-06-01 10:12:50.623725
pkg:deb/ubuntu/unzip purl2cpe 2026-06-01 10:12:50.623727
pkg:github/luadist/unzip purl2cpe 2026-06-01 10:12:50.623728
pkg:gitlab/redhat/unzip purl2cpe 2026-06-01 10:12:50.623729
pkg:rpm/centos/unzip purl2cpe 2026-06-01 10:12:50.623731
pkg:rpm/fedora/unzip purl2cpe 2026-06-01 10:12:50.623732
pkg:rpm/opensuse/unzip purl2cpe 2026-06-01 10:12:50.623733
pkg:sourceforge/infozip purl2cpe 2026-06-01 10:12:50.623735

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-1315 vulnerable 2026-06-08 05:06:25.338080 Details available
Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated by converting a string from CP866 to UTF-8.
Published: 2015-02-23T17:00:00.000Z
Updated: 2024-08-06T04:40:18.209Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.