CVE:CVE-2014-8140
CNNVD:CNNVD-201412-527
Info-ZIP UnZip是美国Greg Roelofs个人开发者的一套基于Unix平台的用于对“.zip”文件格式进行解压的工具。
Info-ZIP UnZip 6.0版本及之前版本存在缓冲区错误漏洞，该漏洞源于基于堆的缓冲区溢出。远程攻击者利用该漏洞在系统上执行任意代码。
solution:Upgrade unzip_project unzip to a higher version than 6.0,and avoid the version (,6.0]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,7.3,7.4,7.6,7.7,and avoid the version 6.6,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6,7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.6,7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.6,7.3,7.6,7.7,and avoid the version 6.6,7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0