CVE-2006-4337

Опубликовано: 19 сент. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676
http://docs.info.apple.com/article.html?artnum=304829
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
http://secunia.com/advisories/21996
http://secunia.com/advisories/22002
Patch
Vendor Advisory
http://secunia.com/advisories/22009
Patch
Vendor Advisory
http://secunia.com/advisories/22012
Patch
Vendor Advisory
http://secunia.com/advisories/22017
Patch
Vendor Advisory
http://secunia.com/advisories/22027
http://secunia.com/advisories/22033
Patch
Vendor Advisory
http://secunia.com/advisories/22034
Patch
Vendor Advisory
http://secunia.com/advisories/22043
Patch
Vendor Advisory
http://secunia.com/advisories/22085
http://secunia.com/advisories/22101
http://secunia.com/advisories/22435
http://secunia.com/advisories/22487
http://secunia.com/advisories/22661
http://secunia.com/advisories/23153
http://secunia.com/advisories/23155

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04174

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-4337

ubuntu

почти 19 лет назад

Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.

CVE-2006-4337

redhat

больше 18 лет назад

Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.

CVE-2006-4337

debian

почти 19 лет назад

Buffer overflow in the make_table function in the LHZ component in gzi ...

GHSA-j29p-hg69-484g

github

больше 3 лет назад

Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.

EPSS

Процентиль: 88%

0.04174

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other