What is CVE-2018-1000035?

CVE-2018-1000035 is a vulnerability in N/a. Published 2018-02-09.

Is CVE-2018-1000035 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2018-1000035

A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve code execution.

EPSS: 0.636 (98.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores
FritzJo/pacheck
phonito/phonito-vulnerable-container
ronomon/zip

References

sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/in… (x_refsource_MISC)
[debian-lts-announce] 20200128 [SECURITY] [DLA 2082-1] unzip security update (mailing-list, x_refsource_MLIST)
GLSA-202003-58 (vendor-advisory, x_refsource_GENTOO)

Frequently asked questions

What is CVE-2018-1000035?: CVE-2018-1000035 is a vulnerability in N/a. Published 2018-02-09.
Is CVE-2018-1000035 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.