:: Deepquest ::

It looks like bzip2 bombs are not the only ones that can cause problems. Decompression bombs in general are causing problems. Compression is used in many applications, but only seldom maximum size limits are checked during decompression of untrusted content.

Impacts:
– simple bombs: compressed binaries containing a huge amount of the same char (binary value.)
– complex MIME bombs: a compressed mailbox containing one e-mail with MIME parts, the last MIME part contains a virus.
– gzip’ed HTML bombs: serving a gzip’ed HTML file, containing a huge amount of spare chars.
– picture bombs (very big in pixels unicolor picture in GIF or PNG format).
– OpenOffice bombs: OpenOffice data ZIP file containing an additional huge file.

Bomb size ratios

Possible impacts

Possible impacts

-Application crashes because of out-of-memory: Process usually terminated by kernel
-Application consumes a lot of virtual memory: High CPU load, high disk load during paging, no or slow reaction. (On Microsoft Windows systems also increasing of paging file can be triggered)
-Application crashed because of out-of-disk space: Normally after a crash the application doesn’t remove the temporary file, system stays in out-of-disk-space state.

more from [url=http://www.aerasec.de/security/advisories/decompression-bomb-vulnerability.html]Aerasec[/url]