CVE-2004-0603: GNU Gzip

High severity, CVSS 10.0. EPSS: 3.1% chance of exploitation in the next 30 days.

gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.

Affected products

• GNU Gzip: up to and including 1.3.3

Published 2004-12-06. Last modified 2026-06-16.