First published: Wed Apr 01 2009(Updated: )
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows Vista | ||
Microsoft Windows Services for UNIX | =3.5 | |
Microsoft Windows Services for UNIX | =3.0 | |
Microsoft Windows Vista | ||
Microsoft Subsystem for UNIX-based Applications | ||
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Vista |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-1216 affects Microsoft Windows Server 2008, Microsoft Windows Vista, and Microsoft Windows Services for UNIX versions 3.0 and 3.5.
The severity of CVE-2009-1216 has not been explicitly rated, but it involves multiple unspecified vulnerabilities within gzip libraries.
Fixing CVE-2009-1216 involves updating the affected software to the latest versions that include security patches.
The potential impacts of CVE-2009-1216 include possible exploitation of vulnerabilities in gzip operations, leading to data corruption or unauthorized access.
While CVE-2009-1216 is from 2009, it remains a concern if the affected systems are still in use without appropriate updates applied.