CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-0001

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.382

EPSS Ranking 97.0%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2010-0001

Gnu » Gzip » Version: N/A

cpe:2.3:a:gnu:gzip:-
Gnu » Gzip » Version: 1.2.4

cpe:2.3:a:gnu:gzip:1.2.4
Gnu » Gzip » Version: 1.2.4a

cpe:2.3:a:gnu:gzip:1.2.4a
Gnu » Gzip » Version: 1.3

cpe:2.3:a:gnu:gzip:1.3
Gnu » Gzip » Version: 1.3.1

cpe:2.3:a:gnu:gzip:1.3.1
Gnu » Gzip » Version: 1.3.10

cpe:2.3:a:gnu:gzip:1.3.10
Gnu » Gzip » Version: 1.3.11

cpe:2.3:a:gnu:gzip:1.3.11
Gnu » Gzip » Version: 1.3.12

cpe:2.3:a:gnu:gzip:1.3.12
Gnu » Gzip » Version: 1.3.13

cpe:2.3:a:gnu:gzip:1.3.13
Gnu » Gzip » Version: 1.3.2

cpe:2.3:a:gnu:gzip:1.3.2
Gnu » Gzip » Version: 1.3.3

cpe:2.3:a:gnu:gzip:1.3.3
Gnu » Gzip » Version: 1.3.4

cpe:2.3:a:gnu:gzip:1.3.4
Gnu » Gzip » Version: 1.3.5

cpe:2.3:a:gnu:gzip:1.3.5
Gnu » Gzip » Version: 1.3.6

cpe:2.3:a:gnu:gzip:1.3.6
Gnu » Gzip » Version: 1.3.7

cpe:2.3:a:gnu:gzip:1.3.7
Gnu » Gzip » Version: 1.3.8

cpe:2.3:a:gnu:gzip:1.3.8
Gnu » Gzip » Version: 1.3.9

cpe:2.3:a:gnu:gzip:1.3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-0001

Products

Pricing

Contact Us