CVE-2009-1216

Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.

• http://secunia.com/advisories/34428Vendor Advisory
• http://securitytracker.com/id?1021937
• http://support.microsoft.com/kb/953602Vendor Advisory
• http://www.securityfocus.com/bid/34258
• http://www.vupen.com/english/advisories/2009/0849Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49435
• http://secunia.com/advisories/34428Vendor Advisory
• http://securitytracker.com/id?1021937
• http://support.microsoft.com/kb/953602Vendor Advisory
• http://www.securityfocus.com/bid/34258
• http://www.vupen.com/english/advisories/2009/0849Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49435

Published

Apr 1, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1210Format string vulnerability in the PROFINET/DCP (PN-DCP) dis…
• CVE-2009-1211Blue Coat ProxySG, when transparent interception mode is ena…
• CVE-2009-1212Multiple insecure method vulnerabilities in PRECIS~2.DLL in …
• CVE-2009-1213Cross-site request forgery (CSRF) vulnerability in attachmen…
• CVE-2009-1214GNU screen 4.0.3 creates the /tmp/screen-exchange temporary …
• CVE-2009-1215Race condition in GNU screen 4.0.3 allows local users to cre…
• CVE-2009-1217Off-by-one error in the GpFont::SetData function in gdiplus.…
• CVE-2009-1218Multiple cross-site scripting (XSS) vulnerabilities in Sun C…
• CVE-2009-1219Sun Calendar Express Web Server in Sun ONE Calendar Server 6…
• CVE-2009-1220Cross-site scripting (XSS) vulnerability in +webvpn+/index.h…
• CVE-2009-1222Directory traversal vulnerability in index.php in webEdition…
• CVE-2009-1223aspWebCalendar Free Edition stores sensitive information und…