CVE:CVE-2014-9636
CNNVD:CNNVD-201501-246
Info-ZIP UnZip是美国软件开发者Greg Roelofs所研发的一套基于Unix平台的用于对“.zip”文件格式进行解压的工具。
Info-ZIP UnZip 6.0版本中存在安全漏洞，该漏洞源于程序在解压缩时没有正确处理zip归档文件。远程攻击者可借助附加的字段利用该漏洞造成拒绝服务（崩溃和越边界读取或写入）。
solution:Upgrade unzip_project unzip to a higher version than 6.0,and avoid the version 6.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21