CVE-2010-0405: Integer Overflow
A bzip2 security issue was reported to Debian security team: Mikołaj Izdebski has discovered an integer overflow flaw in the BZ2_decompress function in bzip2/libbz2. An attacker could use a crafted bz2 file to cause a denial of service (application crash) or potentially to execute arbitrary code. (CVE-2010-0405)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0405?
CVE-2010-0405 is considered to be of medium severity due to the risk of integer overflow vulnerabilities.
How do I fix CVE-2010-0405?
To fix CVE-2010-0405, update to the recommended bzip2 versions specified by your operating system vendor.
What software is affected by CVE-2010-0405?
CVE-2010-0405 affects various versions of the bzip2 software, particularly those prior to 1.0.6.
What type of vulnerability is CVE-2010-0405?
CVE-2010-0405 is an integer overflow vulnerability that can lead to memory corruption.
Can CVE-2010-0405 be exploited remotely?
Yes, CVE-2010-0405 can potentially be exploited remotely if an attacker can trigger the vulnerable bzip2 program.