CVE-2003-0107
CVE-2003-0107
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
EPSS 26.0% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.apple.com/mhonarc/security-announce/msg00038.html
- http://jvn.jp/en/jp/JVN78689801/index.html
- http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:033
- http://www.redhat.com/support/errata/RHSA-2003-081.html
- http://www.redhat.com/support/errata/RHSA-2003-079.html
- http://marc.info/?l=bugtraq&m=104887247624907&w=2
- http://www.kb.cert.org/vuls/id/142121
- http://marc.info/?l=bugtraq&m=104610536129508&w=2
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57405
- http://www.osvdb.org/6599
- http://marc.info/?l=bugtraq&m=104620610427210&w=2
- http://online.securityfocus.com/archive/1/312869
- http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000619
- http://www.securityfocus.com/bid/6913
- http://www.iss.net/security_center/static/11381.php
- http://marc.info/?l=bugtraq&m=104610337726297&w=2
- https://nvd.nist.gov/vuln/detail/CVE-2003-0107