Zlib Buffer Overflow in inflate_table() May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1014398 |
|
SecurityTracker URL: http://securitytracker.com/id/1014398
|
|
CVE Reference:
CVE-2005-2096
(Links to External Site)
|
Updated: Jun 7 2006
|
Original Entry Date: Jul 6 2005
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 1.2.2
|
Description:
A buffer overflow was reported in zlib in the processing of compressed data streams. A remote user may be able to cause denial of service conditions or execute arbitrary code on the target system.
A user can create a specially crafted compressed data stream that, when processed by an application using zlib, will trigger an overflow in the inflate_table() function and cause the application to crash or execute arbitrary code.
The vulnerability resides in 'inftrees.c'.
Tavis Ormandy of the Gentoo Linux Security Audit Team discovered this vulnerability.
|
Impact:
A user can cause an application using zlib to crash or execute arbitrary code. The specific impact depends on the application.
|
Solution:
The vendor has issued a source code fix. Various operating system distribution vendors are issuing fixes for their distributions [a separate alert will be issued for each distribution].
|
Vendor URL: www.zlib.org/ (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 6 Jul 2005 10:47:52 -0400
Subject: [none]
|
A buffer overflow was reported in zlib in the processing of compressed data streams.
A user can create a specially crafted compressed data stream that, when processed
by an application using zlib, will trigger the overflow and cause the application
to crash or execute arbitrary code.
The vulnerability resides in 'inftrees.c'.
Tavis Ormandy of the Gentoo Linux Security Audit Team discovered this vulnerability.
CVE: CAN-2005-2096
|
|
