Every CVE Search/ Get API key

CVE-2001-1269

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive...

2.1 Low

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.

Exploit likelihood

0.50%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.

Record
CVE-2001-1269
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.

Record
CVE-2001-1269
Updated
2026-11-02
EUVDEUVD-2001-1250 No score

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.

Record
EUVD-2001-1250
Updated
2026-11-03
GitHub AdvisoriesGHSA-mjxg-vj93-xfpq No score

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive...

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.

Record
GHSA-mjxg-vj93-xfpq
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1269 is a low vulnerability (CVSS 2.1) in Info-zip Unzip, published July 12, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. No source names a fixed version.

References

MoveEnter Open