Info-Zip Project Zip 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:info-zip_project:zip:3.0:*:*:*:*:*:*:*part: a version: 3.0 update: *
| Vendor | Info Zip Project (30290590-c532-5a10-9f3d-5962a86cf3e4) |
|---|---|
| Product | Zip (0368b2f4-45fd-5547-a47a-c53c7a6bc28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/zip |
purl2cpe | 2026-06-01 10:13:41.552960 |
pkg:deb/ubuntu/zip |
purl2cpe | 2026-06-01 10:13:41.552963 |
pkg:github/cysin/info-zip |
purl2cpe | 2026-06-01 10:13:41.552965 |
pkg:github/luadist/zip |
purl2cpe | 2026-06-01 10:13:41.552968 |
pkg:gitlab/redhat/zip |
purl2cpe | 2026-06-01 10:13:41.552971 |
pkg:rpm/centos/zip |
purl2cpe | 2026-06-01 10:13:41.552973 |
pkg:rpm/fedora/zip |
purl2cpe | 2026-06-01 10:13:41.552976 |
pkg:rpm/opensuse/zip |
purl2cpe | 2026-06-01 10:13:41.552979 |
pkg:sourceforge/infozip |
purl2cpe | 2026-06-01 10:13:41.552981 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-13410 |
vulnerable | 2026-06-08 05:10:51.294987 |
Details available
Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value, given that the entire purpose of -TT is execution of arbitrary commands
Published: 2018-07-06T19:00:00.000Z
Updated: 2026-09-18T10:07:28.143Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.