5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.027 Low
EPSS
Percentile
90.4%
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.
CVEID: CVE-2010-0405**
DESCRIPTION:** bzip2 could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in the BZ2_decompress() function. By persuading a victim to open a specially-crafted compressed file, a remote attacker could exploit this vulnerability to cause the application to crash and execute arbitrary code on the system…
CVSS Base Score: 6.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/61935 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P)
IBM License Metric Tool v9 IBM BigFix Inventory v9
Upgrade to version 9.2.6 or later:
None
CPE | Name | Operator | Version |
---|---|---|---|
ibm license metric tool | eq | 9.2 |