Debian Security Advisory DSA 1026-1 (sash)

The remote host is missing an update to sash announced via advisory DSA 1026-1. Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file. A...

Debian: Security Advisory (DSA-1026-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

zlib compression library DoS

DoS on invalid data stream including ones of PNG files...

Windows binary of "Virtual Floppy Drive 2.1" contains vulnerable zlib (CAN-2005-2096)

The binary of the presumably not widely used Windows software "Virtual Floppy Drive 2.1" http://chitchat.at.infoseek.co.jp/vmware/vfd.html ships with a vfd.dll that is statically linked against zlib 1.2.2 http://www.zlib.net/ which is vulnerable to CAN-2005-2096. A scan with ClamAV against the...

Official Windows binaries of "curl" contain vulnerable zlib 1.2.2 (CAN-2005-2096)

The Windows binaries of "curl", built by the author and maintainer of curl and available for download at http://curl.haxx.se/download.html are linked with zlib 1.2.2 http://www.zlib.net/, which is but vulnerable to CAN-2005-2096: | x:curl -V | curl 7.17.0 i586-pc-mingw32msvc libcurl/7.17.0...

Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096)

The Windows binary GSV48W32.EXE of "gsview" http://pages.cs.wisc.edu/ghost/gsview/ ftp://mirror.cs.wisc.edu/pub/mirrors/ghost/ghostgum/gsv48w32.exe ships with a zlib32.dll originally named zlib.dll v1.2.2 http://www.zlib.net/ which is vulnerable to CAN-2005-2096. The zlib32.dll is dated 2005-03-0...

Softwin's anti-virus BitDefender contains vulnerable zlib (CA-2007-07)

At least the freeware version of Softwin's anti-virus solution BitDefender Free Edition http://www.bitdefender.com/site/view/Download-Free-Products.html http://download.bitdefender.com/windows/free/winfree/en/bitdefenderfreev10.exe ships with a completely outdated zlib 1.1.3 http://www.zlib.net/...

Double free() in zlib

Double free call on same memory chunk causes heap corruption with potential code execution...

openSUSE 10 Security Update : spamassassin (spamassassin-1904)

This update fixes the following security problem in SpamAssassin : - CVE-2006-2447: SpamAssassin when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop...

CentOS 4 : cyrus-sasl (CESA-2007:0795)

An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation...

RHEL 4 : cyrus-sasl (RHSA-2007:0795)

An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation...

cyrus security update

CentOS Errata and Security Advisory CESA-2007:0795 An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The...

Moderate: Red Hat Security Advisory: cyrus-sasl security and bug fix update

An updated cyrus-sasl package that addresses a security issue and fixes various other bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The cyrus-sasl package contains the Cyrus implementation...

security flaw

The zlibinflate function in Linux kernel 2.6.x allows local users to cause a denial of service crash via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs...

Moderate: file security update

4.10-3.0.2 - resolves: 241026: CVE-2007-2799 file integer overflow - added dependency on zlib-devel...

SOL5004 - Security Advisory: zlib buffer overflow - CAN-2005-2096

Vulnerability description zlib 1.2 and later versions allows remote attackers to cause a denial of service crash via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file. Information...

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

CVE-2007-2231

CVE-2007-2231 describes a directory-traversal vulnerability in Dovecot’s index/mbox/mbox-storage.c when using the zlib plugin, allowing remote attackers to read arbitrary gzipped mbox files via a .. sequence. Affected product: Dovecot prior to 1.0.rc29 (also seen in later advisories). Impact: par...

CVE-2007-2231

Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped .gz mailboxes mbox files via a .. dot dot sequence in the mailbox name...

rPSA-2007-0074-1 dovecot

rPath Security Advisory: 2007-0074-1 Published: 2007-04-18 Products: rPath Linux 1 Rating: Informational Exposure Level Classification: Local User Deterministic Information Exposure Updated Versions: dovecot=/conary.rpath.com@rpl:devel//1/1.0.0-0.1-1 References:...