CVE-2018-1000031 — Vulnetix

CVE-2018-1000031 PUBLISHED CVSS 7.800000190734863 HIGH

A heap-based buffer overflow exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service or to possibly achieve code execution.

EPSS 0.51% · 66.9th percentile

Risk Scores

CVSS 3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.51%

66.9th percentile

Affected Products

Vendor	Product	Versions
info-zip	unzip	*
n/a	n/a	n/a

Exploit Intelligence

https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html (circl)
InfoZip UnZip 6.00 / 6.1c22 Buffer Overflow Vulnerability (0day-today)
InfoZip UnZip 6.00 / 6.1c22 Buffer Overflow Vulnerability (0day-today)

Timeline

Feb 8, 2018 PoC Published
Feb 9, 2018 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 28, 2022 EPSS Score
May 2, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html url
https://nvd.nist.gov/vuln/detail/CVE-2018-1000031 advisory

Open in Interactive Console →