CVE-2014-9636

Name of the Vulnerable Software and Affected Versions unzip version 6.0

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read or write and crash. This occurs via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.

Recommendations For unzip version 6.0, update to a newer version that contains a fix for this issue to prevent potential denial of service attacks.