VULNERABILITY INTELLIGENCE

CVE-2004-0603

CVSS score10 HIGH
EPSS probability3.13%
CISA KEVNot currently listed
Published2004-12-06
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.

Primary references