CVE-2010-4666: Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (ap...

Security readout for executives and security teams

A flaw in libarchive 3.0 pre-release code can crash software when it reads a specially crafted CAB archive. The public record says other impact may be possible, but does not define it. Business risk is highest where systems automatically inspect or unpack untrusted archives. Exposure is limited to software using the affected libarchive 3.0 pre-release code path to process CAB files, especially from untrusted users. The source bundle does not provide exact affected package versions, CPEs, or downstream products. Treat as targeted follow-up, not an emergency, unless a critical service processes untrusted CAB files with affected libarchive code. Lack of CVSS, affected version detail, and exploitation evidence limits confidence in urgency. Mitigation focus: Inventory systems and applications that use libarchive for CAB archive handling.; Check libarchive and OS distribution guidance for fixed or unaffected versions.; Avoid processing untrusted CAB files until exposure and fixes are confirmed..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.