Sandipan Roy discovered two vulnerabilities in InfoZIP"s unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the execution of arbitrary code.