PT-2003-1062 · Zlib · Zlib

Richard Kettlewell · Published 2003-03-07 · Updated 2022-06-22 · CVE-2003-0107

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions zlib version 1.1.4

Description The issue is related to a buffer overflow in the gzprintf function in zlib. This can occur when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf. The exploitation of this issue may lead to a denial of service or possibly the execution of arbitrary code. It can also result in the violation of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.

Recommendations For zlib version 1.1.4, consider updating to a newer version that addresses the buffer overflow issue in the gzprintf function. As a temporary workaround, consider restricting the use of the gzprintf function until a patch is available.

Exploit

Fix

Related Identifiers

BDU:2015-07923

BDU:2015-07924

CVE-2003-0107

Affected Products

Zlib

References · 28

• 🔥 http://online.securityfocus.com/archive/1/312869 · Exploit
• 🔥 https://exploit-db.com/exploits/22273 · Exploit
• 🔥 https://exploit-db.com/exploits/22274 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2003-0107 · Vendor Advisory
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-004.txt.asc · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07923 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0107 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07924 · Security Note
• https://osv.dev/vulnerability/CVE-2003-0107 · Vendor Advisory
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0107 · Security Note
• http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000619 · Vendor Advisory
• http://mandrakesoft.com/security/advisories?name=MDKSA-2003:033 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=104887247624907&w=2 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-079.html · Vendor Advisory