CVE-2015-7696

Publication date 12 October 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbitrary code via a crafted password-protected ZIP archive, possibly related to an Extra-Field size value.

Status

Package Ubuntu Release Status
unzip 15.10 wily
Fixed 6.0-17ubuntu1.1
15.04 vivid
Fixed 6.0-13ubuntu3.1
14.04 LTS trusty
Fixed 6.0-9ubuntu1.4
12.04 LTS precise
Fixed 6.0-4ubuntu2.4

References

Related Ubuntu Security Notices (USN)

    • USN-2788-1
    • unzip vulnerabilities
    • 29 October 2015

Other references