gzip: arbitrary code execution
| Package(s): | gzip | CVE #(s): | CVE-2009-2624 | ||||||||||||||||||||||||||||
| Created: | January 20, 2010 | Updated: | March 8, 2010 | ||||||||||||||||||||||||||||
| Description: | From the Debian advisory: Thiemo Nagel discovered a missing input sanitation flaw in the way gzip used to decompress data blocks for dynamic Huffman codes, which could lead to the execution of arbitrary code when trying to decompress a crafted archive. This issue is a reappearance of CVE-2006-4334 and only affects the lenny version. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||