Description

A flaw was found in adm-zip. This vulnerability allows an attacker to achieve privilege escalation when an archive is extracted with the option to preserve original permissions enabled. By providing a specially crafted ZIP archive containing elevated permission attributes, unmasked execution flags are applied to the extracted files. If the extraction is performed by an administrative or privileged account, an attacker can subsequently run these files to gain unauthorized elevated access.

Mitigation

Aliases