CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to…

published January 29, 2010

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04774 · 91.9th percentile
Published
2010-01-29T18:00Z
EPSS history
Timeline
  • 29 JAN 18:00Z
    Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to…
    cvelistv5