CVE-2005-4667
UnZip <= 5.50 - Buffer Overflow via Long Filename Command Line Argument
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-4667. PoCs published by DVDMAN.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Info-ZIP's 'unzip' utility (CVE-2005-4667) by crafting a malicious filename to overwrite memory and execute arbitrary shellcode. The PoC uses a brute-force offset approach to achieve reliable exploitation.
Description
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.
Exploits (1)
This exploit targets a buffer overflow vulnerability in Info-ZIP's 'unzip' utility (CVE-2005-4667) by crafting a malicious filename to overwrite memory and execute arbitrary shellcode. The PoC uses a brute-force offset approach to achieve reliable exploitation.