Unscored severity · published Apr 1, 2009
CVE-2009-1216
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the…
–
CVSS
24.5%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)24.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SF
Subsystem For Unix-based Applications · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2008 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Services For Unix · Microsoft
3.0; 3.5 · source: NVD
WV
Windows Vista · Microsoft
All versions, or not specified · source: NVD
Affected product
SF
Subsystem For Unix-based Applications
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1216
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1216
Vendor Advisory
http://secunia.com/advisories/34428
securitytracker.com
http://securitytracker.com/id?1021937
Vendor Advisory
http://support.microsoft.com/kb/953602
www.securityfocus.com
http://www.securityfocus.com/bid/34258
Vendor Advisory
http://www.vupen.com/english/advisories/2009/0849
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/49435