5.1

CVE-2010-0405

Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.

Data is provided by the National Vulnerability Database (NVD)
Bzip ≫ Bzip2 Version <= 1.0.5
Bzip ≫ Bzip2 Version0.9
Bzip ≫ Bzip2 Version0.9.0
Bzip ≫ Bzip2 Version0.9.0a
Bzip ≫ Bzip2 Version0.9.0b
Bzip ≫ Bzip2 Version0.9.0c
Bzip ≫ Bzip2 Version0.9.5_a
Bzip ≫ Bzip2 Version0.9.5_b
Bzip ≫ Bzip2 Version0.9.5_c
Bzip ≫ Bzip2 Version0.9.5_d
Bzip ≫ Bzip2 Version0.9.5a
Bzip ≫ Bzip2 Version0.9.5b
Bzip ≫ Bzip2 Version0.9.5c
Bzip ≫ Bzip2 Version0.9.5d
Bzip ≫ Bzip2 Version0.9_a
Bzip ≫ Bzip2 Version0.9_b
Bzip ≫ Bzip2 Version0.9_c
Bzip ≫ Bzip2 Version1.0
Bzip ≫ Bzip2 Version1.0.1
Bzip ≫ Bzip2 Version1.0.2
Bzip ≫ Bzip2 Version1.0.3
Bzip ≫ Bzip2 Version1.0.4
Libzip2 ≫ Libzip2 Version <= 1.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 9.21% 0.919
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P