Ubuntu Security Notice 589-1 – Tavis Ormandy discovered that unzip did not correctly clean up pointers. If a user or automated service was tricked into processing a specially crafted ZIP archive, a remote attacker could execute arbitrary code with user privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64772/USN-589-1.txt
Source: https://packetstormsecurity.com/files/64772/Ubuntu-Security-Notice-589-1.html