Arbitrary Code Execution Vulnerability in gzip Libraries for Microsoft Windows

CVE-2009-1216

Summary

Multiple vulnerabilities exist in the gzip libraries included with Microsoft Windows products, specifically in the files unlzh.c and unpack.c. These vulnerabilities may allow a remote attacker to execute arbitrary code on affected systems. The flaws are found in various versions of Windows Server 2008, Windows Services for UNIX, and the Subsystem for UNIX-based Applications, as well as in specific releases of the gunzip, gzip, and unpack applications prior to their respective updates. Exploiting these vulnerabilities could give attackers the capability to compromise the affected systems through various unknown vectors.

References