Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in the unzip utility affect IBM Security Access Manager for Web |
|
| Affected software | IBM |
|
The unzip utility can list, test, or extract files from a zip archive. Buffer overflow vulnerabilities have been identified in the unzip utility. A specially crafted Zip archive could cause unzip to crash or, possibly, execute arbitrary code when the archive is uncompressed. IBM Security Access Manager for Web uses the unzip utility. IBM Security Access Manager for Web has addressed the applicable CVEs. CVE(s): CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636 Affected More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_the_unzip_utility_affect_ibm_security_access_manager_for_web?lang=en_us |
|