Product

debian/zip vulnerabilities

2 published CVES affecting debian/zip, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 1
CISA KEV: 0

Latest debian/zip CVEs

Newest publication first

DSA-624-1 zip - buffer overflow
Published 2005-01-05

Unknown
CVE-2004-1010 Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.
Published 2004-11-09

HighCVSS 10.0

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

debian/zip vulnerabilities

Latest debian/zip CVEs

DSA-624-1 zip - buffer overflow

CVE-2004-1010 Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.