NVD

Id
1330  
Name
CVE-2008-1372  
Description
bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-03-18  
Modified Date
2011-03-07  
Seq
2008-1372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8371 1330 CVE-2008-1372 NetBSD-SA2008-004  View
8372 1330 CVE-2008-1372 http://kb.vmware.com/kb/1006982  View
8373 1330 CVE-2008-1372 http://kb.vmware.com/kb/1007198  View
8374 1330 CVE-2008-1372 http://kb.vmware.com/kb/1007504  View
8375 1330 CVE-2008-1372 APPLE-SA-2009-08-05-1  View
8376 1330 CVE-2008-1372 SUSE-SR:2008:011  View
8377 1330 CVE-2008-1372 oval:org.mitre.oval:def:10067  View
8378 1330 CVE-2008-1372 oval:org.mitre.oval:def:6467  View
8379 1330 CVE-2008-1372 GLSA-200903-40  View
8380 1330 CVE-2008-1372 241786  View
8381 1330 CVE-2008-1372 http://support.apple.com/kb/HT3757  View
8382 1330 CVE-2008-1372 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0118  View
8383 1330 CVE-2008-1372 http://www.bzip.org/CHANGES  View
8384 1330 CVE-2008-1372 http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html  View
8385 1330 CVE-2008-1372 http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/  View
8386 1330 CVE-2008-1372 GLSA-200804-02  View
8387 1330 CVE-2008-1372 http://www.ipcop.org/index.php?name=News&file=article&sid=40  View
8388 1330 CVE-2008-1372 VU#813451  View
8389 1330 CVE-2008-1372 MDVSA-2008:075  View
8390 1330 CVE-2008-1372 RHSA-2008:0893  View
8391 1330 CVE-2008-1372 20080321 rPSA-2008-0118-1 bzip2  View
8392 1330 CVE-2008-1372 20081203 VMSA-2008-0019 VMware Hosted products and patches for ESX and ESXi resolve a critical security issue and update bzip2  View
8393 1330 CVE-2008-1372 28286  View
8394 1330 CVE-2008-1372 1020867  View
8395 1330 CVE-2008-1372 SSA:2008-098-02  View
8396 1330 CVE-2008-1372 USN-590-1  View
8397 1330 CVE-2008-1372 TA09-218A  View
8398 1330 CVE-2008-1372 ADV-2008-0915  View
8399 1330 CVE-2008-1372 ADV-2008-2557  View
8400 1330 CVE-2008-1372 ADV-2009-2172  View
8401 1330 CVE-2008-1372 bzip2-archives-code-execution(41249)  View
8402 1330 CVE-2008-1372 https://bugs.gentoo.org/attachment.cgi?id=146488&action=view  View
8403 1330 CVE-2008-1372 FEDORA-2008-2970  View
8404 1330 CVE-2008-1372 FEDORA-2008-3037  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52494 JVNDB-2007-001186 bzip2 の bzlib.c におけるサービス運用妨害 (DoS) の脆弱性 bzip2 の bzlib.c には、ファイルの展開処理に不備が存在するため、bzip がクラッシュする脆弱性が存在します。 CVE-2008-1372 31485 CVE-2008-1372 1330 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001186.html 2007-12-10 2009-09-02 View