CVE ID:	CVE-2018-18384
Description:	Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2019.1348   1.3.6.1.4.1.25623.1.1.2.2019.1603   1.3.6.1.4.1.25623.1.1.2.2019.1627   1.3.6.1.4.1.25623.1.1.2.2019.1349   1.3.6.1.4.1.25623.1.1.4.2019.13984.1   1.3.6.1.4.1.25623.1.1.4.2020.1796.1   1.3.6.1.4.1.25623.1.1.2.2019.1467   1.3.6.1.4.1.25623.1.1.2.2019.1773   1.3.6.1.4.1.25623.1.1.4.2019.0707.1   1.3.6.1.4.1.25623.1.0.852373
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-18384 https://bugzilla.suse.com/show_bug.cgi?id=1110194 https://sourceforge.net/p/infozip/bugs/53/ RedHat Security Advisories: RHSA-2019:2159 https://access.redhat.com/errata/RHSA-2019:2159 SuSE Security Announcement: openSUSE-SU-2019:1117 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00009.html