CVE-2008-0888 The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute....
HighCVSS 9.3
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| apple mac os x | < 10.6.3 | 10.6.3 |
| debian linux | = 4.0 | No fix listed |
| unzip project unzip | < 6.0 | 6.0 |
| debian/unzip(Debian:12) | < 5.52-11 | 5.52-11 |
| debian/unzip(Debian:13) | < 5.52-11 | 5.52-11 |
| debian/unzip(Debian:14) | < 5.52-11 | 5.52-11 |
| info-zip unzip | < 6.0 | 6.0 |
References
- APPLE-SA-2010-03-29-1 third-party-advisory vendor-advisory
- SUSE-SR:2008:007 third-party-advisory vendor-advisory
- 29392 broken-link third-party-advisory vendor-advisory
- 29406 broken-link third-party-advisory vendor-advisory
- 29415 broken-link third-party-advisory vendor-advisory
- 29427 broken-link third-party-advisory vendor-advisory
- 29432 broken-link third-party-advisory vendor-advisory
- 29440 broken-link third-party-advisory vendor-advisory
- 29495 broken-link third-party-advisory vendor-advisory
- 29681 broken-link third-party-advisory vendor-advisory
- 30535 broken-link patch third-party-advisory vendor-advisory
- 31204 broken-link third-party-advisory vendor-advisory
- GLSA-200804-06 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- wiki.rpath.com broken-link
- wiki.rpath.com broken-link
- DSA-1522 third-party-advisory vendor-advisory
- www.ipcop.org broken-link
- MDVSA-2008:068 not-applicable vendor-advisory
- RHSA-2008:0196 third-party-advisory vendor-advisory
- 20080321 rPSA-2008-0116-1 unzip broken-link mailing-list
- 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues broken-link mailing-list
- 28288 broken-link vdb-entry
- 1019634 broken-link vdb-entry
- USN-589-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2008-0913 broken-link vdb-entry vendor-advisory
- ADV-2008-1744 broken-link vdb-entry vendor-advisory
- unzip-inflatedynamic-code-execution(41246) third-party-advisory vdb-entry
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:9733 broken-link signature vdb-entry
- Debian Security Tracker CVE-2008-0888 vendor-advisory