CVE-2010-4666

libarchive 3.0 - Buffer Overflow in LZX Huffman Code Handling

Title source: llm
STIX 2.1

Description

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.

References (2)

Core 2
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=705849

Scores

EPSS 0.0043
EPSS Percentile 62.4%

Details

CWE
CWE-119
Status published
Products (1)
freebsd/libarchive 3.0
Published Apr 13, 2012
Tracked Since Feb 18, 2026