Try this link: http://www.aerasec.de/security/advisories/decompression-bomb-vulnerability.html