CVE ID:	CVE-2014-9636
Description:	unzip 6.0 allows remote attackers to cause a denial of service (out- of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.
Test IDs:	1.3.6.1.4.1.25623.1.0.868965   1.3.6.1.4.1.25623.1.1.12.2015.2489.1   1.3.6.1.4.1.25623.1.1.4.2015.0377.1   1.3.6.1.4.1.25623.1.0.868957   1.3.6.1.4.1.25623.1.0.123156   1.3.6.1.4.1.25623.1.1.4.2015.0355.1   1.3.6.1.4.1.25623.1.0.703152
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9636 BugTraq ID: 71825 http://www.securityfocus.com/bid/71825 Debian Security Information: DSA-3152 (Google Search) http://www.debian.org/security/2015/dsa-3152 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148792.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148849.html https://security.gentoo.org/glsa/201611-01 http://seclists.org/oss-sec/2014/q4/489 http://seclists.org/oss-sec/2014/q4/496 http://seclists.org/oss-sec/2015/q1/216 http://seclists.org/oss-sec/2014/q4/1131 http://secunia.com/advisories/62738 http://secunia.com/advisories/62751 http://www.ubuntu.com/usn/USN-2489-1