NVD

Id
858  
Name
CVE-2008-0888  
Description
The NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a free of uninitialized or previously-freed data.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-17  
Modified Date
2011-06-20  
Seq
2008-0888  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5194 858 CVE-2008-0888 APPLE-SA-2010-03-29-1  View
5195 858 CVE-2008-0888 SUSE-SR:2008:007  View
5196 858 CVE-2008-0888 oval:org.mitre.oval:def:9733  View
5197 858 CVE-2008-0888 GLSA-200804-06  View
5198 858 CVE-2008-0888 http://support.apple.com/kb/HT4077  View
5199 858 CVE-2008-0888 http://wiki.rpath.com/Advisories:rPSA-2008-0116  View
5200 858 CVE-2008-0888 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0116  View
5201 858 CVE-2008-0888 DSA-1522  View
5202 858 CVE-2008-0888 http://www.ipcop.org/index.php?name=News&file=article&sid=40  View
5203 858 CVE-2008-0888 MDVSA-2008:068  View
5204 858 CVE-2008-0888 RHSA-2008:0196  View
5205 858 CVE-2008-0888 20080321 rPSA-2008-0116-1 unzip  View
5206 858 CVE-2008-0888 20080604 VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues  View
5207 858 CVE-2008-0888 28288  View
5208 858 CVE-2008-0888 1019634  View
5209 858 CVE-2008-0888 USN-589-1  View
5210 858 CVE-2008-0888 http://www.vmware.com/security/advisories/VMSA-2008-0009.html  View
5211 858 CVE-2008-0888 ADV-2008-0913  View
5212 858 CVE-2008-0888 ADV-2008-1744  View
5213 858 CVE-2008-0888 unzip-inflatedynamic-code-execution(41246)  View
5214 858 CVE-2008-0888 https://issues.rpath.com/browse/RPL-2317  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45871 JVNDB-2008-001181 UnZip の NEEDBITS マクロにおける無効なバッファ領域を参照してしまう問題 UnZip の inflate.c には、inflate_dynamic() 関数の NEEDBITS マクロにおいて、バッファの取り扱いに不備があるため、初期化されていないデータや以前に解放されたデータを解放される脆弱性が存在します。 CVE-2008-0888 31001 CVE-2008-0888 858 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001181.html 2008-03-17 2010-12-15 View