Bug#1142906: unzip: heap buffer overflow WRITE in memextract() STORED path [CAN-2026-2034442]

Paul Marquess <[email protected]>
Newsgroups gmane.linux.debian.devel.bugs.rc
Message-ID <VI0P190MB24584F473A580D6572D15B16E5C92@VI0P190MB2458.EURP190.PROD.OUTLOOK.COM> 
Is the poc zip file completely contrived, or is it based on an existing zip file?

I ask because I created a zip from scratch to test this, but it may lack some of the VMS features of a real zip created on a VMS system. Been decades since I used VMS.

PAul
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.