Description
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.
References (6)
Core 6
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0849
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1021937
Vendor Advisory vendor-advisory
x_refsource_mskb
http://support.microsoft.com/kb/953602
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/34258
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34428
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49435
Scores
EPSS
0.2449
EPSS Percentile
97.7%
Details
Status
published
Products (5)
microsoft/subsystem_for_unix-based_applications
microsoft/windows_server_2008
microsoft/windows_services_for_unix
3.0
microsoft/windows_services_for_unix
3.5
microsoft/windows_vista
(3 CPE variants)
Published
Apr 01, 2009
Tracked Since
Feb 18, 2026