Approved changes feed: RSS · Atom

cpe:2.3:a:info-zip:unzip:5.52:*:*:*:*:*:*:*

part: a version: 5.52 update: *

VendorInfo Zip (1e221f8a-4d44-5634-b451-4c9ee6580569)
ProductUnzip (3e193c2f-9a45-513a-889c-7cef0809d028)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/unzip purl2cpe 2026-06-01 10:12:50.623703
pkg:deb/ubuntu/unzip purl2cpe 2026-06-01 10:12:50.623705
pkg:github/luadist/unzip purl2cpe 2026-06-01 10:12:50.623706
pkg:gitlab/redhat/unzip purl2cpe 2026-06-01 10:12:50.623708
pkg:rpm/centos/unzip purl2cpe 2026-06-01 10:12:50.623709
pkg:rpm/fedora/unzip purl2cpe 2026-06-01 10:12:50.623710
pkg:rpm/opensuse/unzip purl2cpe 2026-06-01 10:12:50.623712
pkg:sourceforge/infozip purl2cpe 2026-06-01 10:12:50.623713

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2475 vulnerable 2026-06-08 04:48:29.435517 Details available
Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
Published: 2005-08-05T04:00:00.000Z
Updated: 2024-08-07T22:30:01.772Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.