CVEvulnerability

CVE-2010-0405

5.1 MEDIUM Published 2010-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-189

Description

Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.

Affected configurations

• bzip bzip2 (<= 1.0.5) • bzip bzip2 0.9 • bzip bzip2 0.9.0 • bzip bzip2 0.9.0a • bzip bzip2 0.9.0b • bzip bzip2 0.9.0c • bzip bzip2 0.9.5 a • bzip bzip2 0.9.5 b • bzip bzip2 0.9.5 c • bzip bzip2 0.9.5 d • bzip bzip2 0.9.5a • bzip bzip2 0.9.5b • bzip bzip2 0.9.5c • bzip bzip2 0.9.5d • bzip bzip2 0.9 a • bzip bzip2 0.9 b • bzip bzip2 0.9 c • bzip bzip2 1.0 • bzip bzip2 1.0.1 • bzip bzip2 1.0.2 • bzip bzip2 1.0.3 • bzip bzip2 1.0.4 • libzip2 libzip2 (<= 1.0.5)

Related

Weakness · not in database (1)

References