Oracle Linux 5 : bzip2 (ELSA-2010-0703)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0703 advisory. 1.0.3-6 - Related: 632173 use the upstream patch 1.0.3-5 - Resolves: 632173 integer overflow flaw in BZ2decompress - CVE-2010-0405 Tenable has extracted the...

openSUSE Security Update : bzip2 (openSUSE-SU-2010:0684-1)

This update fixes an integer overflow in the BZ2decompress function of bzip2/libbz2. This can be exploited via a crafted archive to cause a denial of service or even execute arbitrary code. CVE-2010-0405 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

Fedora 14 : clamav-0.96.3-1400.fc14 (2010-15443)

Bug 627882 - CVE-2010-0405 bzip2: integer overflow flaw in BZ2decompress Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2010-0405

Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file...

Integer overflow

Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file...

CVE-2010-0405

The CVE-2010-0405 issue affects bzip2/libbzip2 before 1.0.6, where an integer overflow in BZ2_decompress (decompress.c) can crash the application or, via a crafted file, possibly allow arbitrary code execution. Reported impact includes denial of service and potential code execution; exploit detai...

CVE-2010-0405

Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file...

CVE-2010-0405

Integer overflow in the BZ2decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted compressed file...

bzip2 -- integer overflow vulnerability

Secunia reports: A vulnerability has been reported in bzip2, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. The vulnerability is caused due to an integer overflow in the "BZ2decompress" function in decompress.c and can be...