Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4666
HistoryApr 13, 2012 - 12:00 a.m.

CVE-2010-4666

2012-04-1300:00:00
ubuntu.com
ubuntu.com
11

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.6%

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers
to cause a denial of service (application crash) or possibly have
unspecified other impact via a crafted CAB file, which is not properly
handled during the reading of Huffman code data within LZX compressed data.

Bugs

Notes

Author Note
mdeslaur no cab support in versions we carry

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.6%