Approved changes feed: RSS · Atom

cpe:2.3:a:info-zip:unzip:5.3:*:*:*:*:*:*:*

part: a version: 5.3 update: *

VendorInfo Zip (1e221f8a-4d44-5634-b451-4c9ee6580569)
ProductUnzip (3e193c2f-9a45-513a-889c-7cef0809d028)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/unzip purl2cpe 2026-06-01 10:12:50.614035
pkg:deb/ubuntu/unzip purl2cpe 2026-06-01 10:12:50.614037
pkg:github/luadist/unzip purl2cpe 2026-06-01 10:12:50.614038
pkg:gitlab/redhat/unzip purl2cpe 2026-06-01 10:12:50.614039
pkg:rpm/centos/unzip purl2cpe 2026-06-01 10:12:50.614041
pkg:rpm/fedora/unzip purl2cpe 2026-06-01 10:12:50.614042
pkg:rpm/opensuse/unzip purl2cpe 2026-06-01 10:12:50.614043
pkg:sourceforge/infozip purl2cpe 2026-06-01 10:12:50.614045

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4667 vulnerable 2026-06-08 04:48:44.643695 Details available
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.
Published: 2006-01-25T21:00:00.000Z
Updated: 2024-08-07T23:53:28.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.