Description
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.
References
- ADV-2009-0849 vdb-entry
- 1021937 vdb-entry
- 953602 vendor-advisory
- 34258 vdb-entry
- 34428 third-party-advisory
- win-unlzh-unpack-code-execution(49435) vdb-entry