CVE		CVE-2008-1372
Status		Candidate
Description		bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.
Phase		Assigned (18.03.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1372
References		BID : 28286
		CERT-VN : VU#813451
		CONFIRM : http://bzip.org/
		CONFIRM : https://bugs.gentoo.org/attachment.cgi?id=146488&#...
		FRSIRT : ADV-2008-0915
		MISC : http://www.cert.fi/haavoittuvuudet/joint-advisory-...
		XF : bzip2-archives-code-execution(41249)
SecurityVulns:		unzip / bzip2 DoS