CVE-2011-4089

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local…

published April 16, 2014

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01045 · 63.6th percentile
Published
2014-04-16T18:00Z
EPSS history
Timeline
  • 16 APR 18:00Z
    The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local…
    cvelistv5