Buffer overflow in Freebsd Libarchive

CVE-2010-4666

Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.

Vulnerability class: Buffer Overflow

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References