CVE-2010-0001

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-01-29 · updated 2026-06-16
Weakness: CWE-189

Description

Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.

Affected products

GNU gzip: through 1.3.13; 1.2.4, 1.2.4a, 1.3, 1.3.1, 1.3.2, 1.3.3 (+9)

References

http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
http://ncompress.sourceforge.net/#status
http://savannah.gnu.org/forum/forum.php?forum_id=6153
http://secunia.com/advisories/38220
http://secunia.com/advisories/38223
http://secunia.com/advisories/38225
http://secunia.com/advisories/38232
http://secunia.com/advisories/40551

Get alerted when CVE-2010-0001 or the next vulnerability affects your stack