CVE-2009-1216

Published: Apr 1, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.

Affected (7)

Products: Microsoft: Subsystem For Unix Based Applications, Windows Server 2008, Windows Services For Unix, Windows Vista

Microsoft

4 products

Subsystem For Unix Based Applications

Windows Server 2008

Windows Services For Unix

Windows Vista

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Subsystem For Unix Based Applications	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Services For Unix	Version 3.0
Microsoft Windows Services For Unix	Version 3.5
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions