CVE-2009-2624

Metadata

CVE-2009-2624
6.8
article.gmane.org, bugs.debian.org, git.savannah.gnu.org, lists.apple.com, lists.opensuse.org, support.apple.com, debian.org, mandriva.com, ubuntu.com, vupen.com, bugzilla.redhat.com
2010-01-29
2017-06-06 20:20

Description

The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (application crash or infinite loop) or possibly execute arbitrary code via a crafted archive. NOTE: this issue is caused by a CVE-2006-4334 regression.

Related Vulnerabilities

platform vulnerability
CVE-2009-2624 gzip
CVE-2009-2624