A vulnerability has been reported in UnZip, which potentially can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to the use of uninitialized pointers in the "inflate_dynamic()" function in inflate.c. This can potentially be exploited to free an attacker-controlled memory region and execute arbitrary code via a specially crafted ZIP compressed file.
Successful exploitation may allow execution of arbitrary code.
The vulnerability is reported in version 5.52. Other versions may also be affected.
Solution: Do not process untrusted archives using UnZip.
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this
information to firstname.lastname@example.org