Mandriva Linux Security Advisory - Tavis Ormandy of Google Security discovered an invalid pointer flaw in unzip that could lead to the execution of arbitrary code with the privileges of the user running unzip.
6241bf31366b86f9214c0b04b8389979ede508c055d9251b1a4119710eb80ccc