CVEvulnerability

CVE-2008-1372

4.3 MEDIUM Published 2008-03-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.

Affected configurations

• bzip bzip2 0.9 • bzip bzip2 0.9.5a • bzip bzip2 0.9.5b • bzip bzip2 0.9.5c • bzip bzip2 0.9.5d • bzip bzip2 0.9 a • bzip bzip2 0.9 b • bzip bzip2 0.9 c • bzip bzip2 1.0 • bzip bzip2 1.0.1 • bzip bzip2 1.0.2 • bzip bzip2 1.0.3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References