Buffer overflow in Freebsd Libarchive
CVE-2010-4666
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
Vulnerability class: Buffer Overflow
EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Freebsd Libarchive — versions 3.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)