CVE-2022-0529
MEDIUMUnzip - Heap-Based Buffer Overflow via Crafted Zip File
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2022-0529. PoCs published by ByteHackr, nanaao, bytehackr.
AI-analyzed exploit summary This PoC demonstrates a heap out-of-bounds write/read vulnerability in unzip (CVE-2022-0529) during wide string to local string conversion. The exploit triggers memory corruption via a crafted zip archive, leading to potential DoS or further exploitation.
Description
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
Exploits (3)
This PoC demonstrates a heap out-of-bounds write/read vulnerability in unzip (CVE-2022-0529) during wide string to local string conversion. The exploit triggers memory corruption via a crafted zip archive, leading to potential DoS or further exploitation.
This PoC demonstrates a heap out-of-bounds write/read vulnerability in unzip (CVE-2022-0529) during wide string to local string conversion. The exploit triggers memory corruption via a malformed ZIP archive, leading to potential DoS or further exploitation.
This repository contains functional exploit scripts for CVE-2022-0529 and CVE-2022-0530, which are segmentation fault vulnerabilities in unzip 6.0. The scripts use Docker to reproduce the crash with valgrind, demonstrating the vulnerability.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H