zlib "gzprintf()" function vulnerable to buffer overflow

Overview A buffer overflow exists in one of the functions included with the zlib compression library. This vulnerability may allow a remote attacker to execute arbitrary code or cause a denial of service. An exploit for this vulnerability is publicly available. Description The zlib website...

Moderate: Red Hat Security Advisory: zlib security update

Updated zlib packages that fix a buffer overflow vulnerability are now available. Zlib is a general-purpose, patent-free, lossless data compression library that is used by many different programs. The function gzprintf within zlib, when called with a string longer than ZPRINTFBUFZISE = 4096 bytes...

Moderate: Red Hat Security Advisory: : Updated zlib packages fix gzprintf buffer overflow vulnerability

Updated zlib packages are now available which fix a buffer overflow vulnerability. Zlib is a general-purpose, patent-free, lossless data compression library used by many different programs. The function gzprintf within zlib, when called with a string longer than ZPRINTFBUFZISE = 4096 bytes, can...

DEBIAN-CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...

CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...

CVE-2003-0107

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute...

zlib gzprintf() buffer overflow

Buffer overflow if resulting string exceeds 4K buffer...

Zlib 1.1.4 - Compression Library gzprintf() Buffer Overrun (1)

Zlib 1.1.4 - Compression Library gzprintf Buffer Overrun 1 // source: https://www.securityfocus.com/bid/6913/info A buffer-overrun vulnerability has been reported in the Zlib compression library. Due to the use of 'vsprintf' by an internal Zlib function, an attacker can cause memory to become...

Zlib 1.1.4 - Compression Library gzprintf() Buffer Overrun (2)

Zlib 1.1.4 - Compression Library gzprintf Buffer Overrun 2 // source: https://www.securityfocus.com/bid/6913/info A buffer-overrun vulnerability has been reported in the Zlib compression library. Due to the use of 'vsprintf' by an internal Zlib function, an attacker can cause memory to become...

Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (2)

// source: https://www.securityfocus.com/bid/6913/info A buffer-overrun vulnerability has been reported in the Zlib compression library. Due to the use of 'vsprintf' by an internal Zlib function, an attacker can cause memory to become corrupted. This buffer overrun occurs becuase the software fai...

Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (1)

// source: https://www.securityfocus.com/bid/6913/info A buffer-overrun vulnerability has been reported in the Zlib compression library. Due to the use of 'vsprintf' by an internal Zlib function, an attacker can cause memory to become corrupted. This buffer overrun occurs becuase the software fai...

Дырки в Macromedia Flash

Привет. Нашел несколько ошибок в Macromedia Flash 6.0, вроде бы еще неизвестных. Несколько ошибок разбора файла, но несерьезных: ошибки чтения из защищенной области памяти и цикл в котором мгновенно пожирается память, но есть две достаточно серьезных: 1. Используется zlib v1.1.3 с double free не...

CVE-2002-0059

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once a "double free", which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data...

CVE-2002-0059

CVE-2002-0059: The decompression algorithm in zlib 1.1.3 and earlier can cause inflateEnd to free memory more than once (a double free), enabling memory corruption that may allow arbitrary code execution via malformed compression data. Affected: zlib up to version 1.1.3 and earlier. Root cause: d...

Security Advisory: Vulnerability in zlib library

Cisco Security Advisory: Vulnerability in the zlib Compression Library Revision 1.0 For Public Release 2002 April 03 16:00 UTC +0000 - --------------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software Versions and Fixes Obtainin...

Vulnerability in the zlib Compression Library

...

FreeBSD-SA-02:18.zlib

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-02:18 Security Advisory FreeBSD, Inc. Topic: zlib double-free Category: core, ports Module: zlib Announced: 2002-03-18 Revised: 2002-04-22 Credits: Matthias Clasen Owen...

CVE-2002-0059

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once a "double free", which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data...

Advisory CA-2002-07 Double Free Bug in zlib Compression Library

CERT Advisory CA-2002-07 Double Free Bug in zlib Compression Library Original release date: March 12, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Any software that is linked to zlib 1.1.3 or earlier may be affected Data...