USN-589-1: unzip vulnerability
20 March 2008
- unzip -
Tavis Ormandy discovered that unzip did not correctly clean up pointers.
If a user or automated service was tricked into processing a specially
crafted ZIP archive, a remote attacker could execute arbitrary code with
The problem can be corrected by updating your system to the following package versions:
In general, a standard system upgrade is sufficient to effect the