CVE-2009-1216
Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.
Key facts
- CVSS score
- 10.0 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C- EPSS score
- 24.5% (98th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2009-1215)
- Published
- April 1, 2009
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2009-1215 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- microsoft / subsystem for unix-based applications
- microsoft / windows server 2008
- microsoft / windows services for unix
- microsoft / windows services for unix
- microsoft / windows vista
- microsoft / windows vista
- microsoft / windows vista
Certified products that may be affected
17 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Microsoft Windows Server 2008 R2 Hyper-V Release 6.1.7600 - Microsoft Corporation - Common Criteria BSI-DSZ-CC-0755-2012 - archived
- Microsoft Windows 7, Microsoft Windows Server 2008 R2 - Microsoft Corporation - Common Criteria CCEVS-VR-10390-2010 - archived
- Windows Server 2008 R2 BitLocker™ Drive Encryption - Microsoft Corporation - FIPS 140 1339 - historical
- Windows Server 2008 R2 Enhanced Cryptographic Provider (RSAENH) - Microsoft Corporation - FIPS 140 1337 - historical
- Microsoft Windows Server 2008 R2 Kernel Mode Cryptographic Primitives Library (cng.sys) - Microsoft Corporation - FIPS 140 1335 - historical
See all 17 in the Security Certifications Explorer.
References
- http://secunia.com/advisories/34428(Vendor Advisory)
- http://securitytracker.com/id?1021937
- http://support.microsoft.com/kb/953602(Vendor Advisory)
- http://www.securityfocus.com/bid/34258
- http://www.vupen.com/english/advisories/2009/0849(Vendor Advisory)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49435
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain