CVE-2009-1216
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat,…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 24.5%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 24.49% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/subsystem for unix-based applications · microsoft/windows services for unix · microsoft/windows server 2008 · microsoft/windows vista
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/34428Vendor Advisory
- http://securitytracker.com/id?1021937
- http://support.microsoft.com/kb/953602Vendor Advisory
- http://www.securityfocus.com/bid/34258
- http://www.vupen.com/english/advisories/2009/0849Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49435
- http://secunia.com/advisories/34428Vendor Advisory
- http://securitytracker.com/id?1021937
- http://support.microsoft.com/kb/953602Vendor Advisory
- http://www.securityfocus.com/bid/34258
- http://www.vupen.com/english/advisories/2009/0849Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49435
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.