CVE-2005-2475: Info-Zip Unzip

Low severity, CVSS 1.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.

Affected products

• Info-Zip Unzip: version 5.52 only

Published 2005-08-05. Last modified 2026-06-16.