VULNERABILITY INTELLIGENCE
CVE-2010-0405
CVSS score5.1 MEDIUM
EPSS probability3.30%
CISA KEVNot currently listed
Published2010-09-28
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.