PT-2006-5144 · Gnu+2 · Gzip+2

Tavis Ormandy · Published 2006-09-19 · Updated 2024-06-15 · CVE-2006-4335

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions gzip version 1.3.5

Description The issue is related to an array index error in the make table function in unlzh.c, part of the LZH decompression component. This error can be triggered by a crafted GZIP archive, potentially leading to a denial of service (crash) and possibly allowing the execution of arbitrary code due to an out-of-bounds write. This is described as a stack modification issue.

Recommendations For gzip version 1.3.5, consider updating to a newer version that addresses this issue, as the current version may allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via a crafted GZIP archive.

Fix

Related Identifiers

CVE-2006-4335

DSA-1181-1

HPSBUX02195

OPENSUSE-SU-2024:10440-1

RHSA-2006:0667

RHSA-2006_0667

Affected Products

Hp-Ux

Red Hat

Gzip

References · 77

• http://openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html · Vendor Advisory
• http://us.debian.org/security/2006/dsa-1181 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200611-24.xml · Vendor Advisory
• http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc · Vendor Advisory
• http://securityfocus.com/archive/1/462007/100/0/threaded · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200609-13.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4335 · Vendor Advisory
• http://trustix.org/errata/2006/0052 · Vendor Advisory
• http://securityfocus.com/archive/1/451324/100/0/threaded · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4337 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4336 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4335 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4338 · Security Note