CVE-2010-0001

CVE-2010-0001 is an integer underflow in gzip’s unlzw() for 64-bit platforms, triggered while decompressing LZW data. The vulnerability can cause an application crash or potentially arbitrary code execution when a crafted archive is opened. Public advisories note this affects gzip prior to versio...

CVE-2009-2624

CVE-2009-2624 affects the GNU gzip utility. The bug is in gzip’s huft_build function (inflate.c) where the Huffman table is allocated too small, enabling a crafted archive to cause a denial of service (crash or infinite loop) and possibly arbitrary code execution. Root cause is a regression from ...