CVE-2005-2096

2005-07-0600:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.059 Low

EPSS

Percentile

93.4%

JSON

zlib 1.2 and later versions allows remote attackers to cause a denial of
service (crash) via a crafted compressed stream with an incomplete code
description of a length greater than 1, which leads to a buffer overflow,
as demonstrated using a crafted PNG file.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchaide< 0.10-11UNKNOWN
ubuntu6.10noarchaide< 0.10-11UNKNOWN
ubuntu7.04noarchaide< 0.10-11UNKNOWN
ubuntu6.06noarchbacula< 1.36.3-2ubuntu2UNKNOWN
ubuntu6.06noarchdump< 0.4b41-2UNKNOWN
ubuntu6.10noarchdump< 0.4b41-2UNKNOWN
ubuntu7.04noarchdump< 0.4b41-2UNKNOWN
ubuntu6.06noarchia32-libs< 1.4ubuntu20UNKNOWN
ubuntu6.10noarchia32-libs< 1.5ubuntu5UNKNOWN
ubuntu7.04noarchia32-libs< 1.5ubuntu5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	aide	< 0.10-11	UNKNOWN
ubuntu	6.10	noarch	aide	< 0.10-11	UNKNOWN
ubuntu	7.04	noarch	aide	< 0.10-11	UNKNOWN
ubuntu	6.06	noarch	bacula	< 1.36.3-2ubuntu2	UNKNOWN
ubuntu	6.06	noarch	dump	< 0.4b41-2	UNKNOWN
ubuntu	6.10	noarch	dump	< 0.4b41-2	UNKNOWN
ubuntu	7.04	noarch	dump	< 0.4b41-2	UNKNOWN
ubuntu	6.06	noarch	ia32-libs	< 1.4ubuntu20	UNKNOWN
ubuntu	6.10	noarch	ia32-libs	< 1.5ubuntu5	UNKNOWN
ubuntu	7.04	noarch	ia32-libs	< 1.5ubuntu5	UNKNOWN