CVEvulnerability

CVE-2009-1216

10.0 HIGH Published 2009-04-01 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2009-04-01
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.

Affected configurations

• microsoft subsystem for unix-based applications • microsoft windows services for unix 3.0 • microsoft windows services for unix 3.5 • microsoft windows server 2008 • microsoft windows vista

References

http://secunia.com/advisories/34428 Vendor Advisory
http://securitytracker.com/id?1021937 securitytracker.com
http://support.microsoft.com/kb/953602 Vendor Advisory
http://www.securityfocus.com/bid/34258 www.securityfocus.com
http://www.vupen.com/english/advisories/2009/0849 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49435 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/34428 Vendor Advisory
http://securitytracker.com/id?1021937 securitytracker.com
http://support.microsoft.com/kb/953602 Vendor Advisory
http://www.securityfocus.com/bid/34258 www.securityfocus.com
http://www.vupen.com/english/advisories/2009/0849 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49435 exchange.xforce.ibmcloud.com