// For flags

CVE-2008-0888

unzip: free() called for uninitialized or already freed pointer

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.

La macro NEEDBITS en la función inflate_dynamic en el archivo inflate.c para unzip puede ser invocada usando búferes no válidos, lo que permite a los atacantes remotos causar una denegación de servicio (bloqueo) y posiblemente ejecutar código arbitrario por medio de vectores desconocidos que activan una liberación de datos no inicializados o previamente liberados.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-02-21 CVE Reserved
  • 2008-03-17 CVE Published
  • 2025-03-30 EPSS Updated
  • 2025-04-02 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (33)
URL Tag Source
http://support.apple.com/kb/HT4077 X_refsource_confirm
http://wiki.rpath.com/Advisories:rPSA-2008-0116 X_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116 X_refsource_confirm
http://www.ipcop.org/index.php?name=News&file=article&sid=40 X_refsource_confirm
http://www.securityfocus.com/archive/1/489967/100/0/threaded Mailing List
http://www.securityfocus.com/archive/1/493080/100/0/threaded Mailing List
http://www.securityfocus.com/bid/28288 Vdb Entry
http://www.securitytracker.com/id?1019634 Vdb Entry
http://www.vmware.com/security/advisories/VMSA-2008-0009.html X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/41246 Vdb Entry
https://issues.rpath.com/browse/RPL-2317 X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9733 Signature
URL Date SRC
URL Date SRC
http://secunia.com/advisories/30535 2018-10-15
URL Date SRC
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html 2018-10-15
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00008.html 2018-10-15
http://secunia.com/advisories/29392 2018-10-15
http://secunia.com/advisories/29406 2018-10-15
http://secunia.com/advisories/29415 2018-10-15
http://secunia.com/advisories/29427 2018-10-15
http://secunia.com/advisories/29432 2018-10-15
http://secunia.com/advisories/29440 2018-10-15
http://secunia.com/advisories/29495 2018-10-15
http://secunia.com/advisories/29681 2018-10-15
http://secunia.com/advisories/31204 2018-10-15
http://security.gentoo.org/glsa/glsa-200804-06.xml 2018-10-15
http://www.debian.org/security/2008/dsa-1522 2018-10-15
http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:068 2018-10-15
http://www.redhat.com/support/errata/RHSA-2008-0196.html 2018-10-15
http://www.ubuntu.com/usn/usn-589-1 2018-10-15
http://www.vupen.com/english/advisories/2008/0913/references 2018-10-15
http://www.vupen.com/english/advisories/2008/1744 2018-10-15
https://access.redhat.com/security/cve/CVE-2008-0888 2008-03-18
https://bugzilla.redhat.com/show_bug.cgi?id=431438 2008-03-18
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Info-zip
Search vendor "Info-zip"
 Unzip
Search vendor "Info-zip" for product "Unzip"
*-
Affected