CVE-2010-4666
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of...
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
- Record
CVE-2010-4666- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
- Record
CVE-2010-4666- Updated
- 2026-11-02
EUVDEUVD-2010-4631 No score
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
- Record
EUVD-2010-4631- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grv9-pvr2-fc6r No score
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of...
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
- Record
GHSA-grv9-pvr2-fc6r- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
- Record
CVE-2010-4666- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4666 No score
Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CAB file, which is not properly handled during the reading of Huffman code data within LZX compressed data.
- Record
DEBIAN-CVE-2010-4666- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libarchiveDebian:12 |
before 3.0.4-2 | 3.0.4-2 |
libarchiveDebian:13 |
before 3.0.4-2 | 3.0.4-2 |
libarchiveDebian:14 |
before 3.0.4-2 | 3.0.4-2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4666 is a high vulnerability (CVSS 7.5) in Freebsd Libarchive, published April 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in libarchive 3.0.4-2.