CVE-2005-1260: Apple Mac OS X

Medium severity, CVSS 5.0. EPSS: 6.2% chance of exploitation in the next 30 days.

bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a "decompression bomb").

Affected products

• Apple Mac OS X: before 10.4.11 (fixed in 10.4.11)
• Bzip BZIP2: before 1.0.3 (fixed in 1.0.3)
• Canonical Ubuntu Linux: version 4.10 only; version 5.04 only
• Debian Debian Linux: version 3.0 only; version 3.1 only

Published 2005-05-19. Last modified 2026-06-16.