CVE Catalog
CVE-2021-4217
LowSummary
A flaw was found in unzip due to improper handling of Unicode strings, leading to a null pointer dereference. An attacker can supply a specially crafted zip file, causing a crash or code execution.
Risk Assessment
Risk includes potential arbitrary code execution or system crash when extracting a malicious zip file.
Recommendation
Update unzip to the latest version containing the security fix.
Original NVD description (English source)
A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.