VIR Vulnerability Intelligence Relay

CVE-2014-9485

unknown
Published — · Modified —
CVSS v3
—
CVSS v2
—
VIR risk
—

Description

Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2014-9485

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed1.1-6
debian debianbullseyefixed1.1-6

References

Verify integrity in audit chain (admin only). AS-IS.