CVE-2005-4667: Info-Zip Unzip

Low severity, CVSS 3.7. EPSS: 1.5% chance of exploitation in the next 30 days.

Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename command line argument. NOTE: since the overflow occurs in a non-setuid program, there are not many scenarios under which it poses a vulnerability, unless unzip is passed long arguments when it is invoked from other programs.

Affected products

• Info-Zip Unzip: version 5.2 only; version 5.3 only; version 5.31 only; version 5.32 only; version 5.40 only; version 5.41 only; …

Published 2005-12-31. Last modified 2026-06-16.