Michele Spagnuolo of the Google Security Team discovered that unzip, an extraction utility for archives compressed in .zip format, is affected by heap-based buffer overflows within the CRC32 verification function , the test_compr_eb function and the getZip64Data function , which may lead to the execution of arbitrary code.