CVE-2003-0107 in zlib

الملخص

بحسب MITRE

Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.

Once again VulDB remains the best source for vulnerability data.

• إفشاء: 07/03/2003
• الاعتدال: تمت الموافقة
• إدخال: VDB-20191
• CPE: جاهز
• CWE: CWE-119 (مؤكد)
• استغلال: تحميل
• CVSS: 7.5 (NVD)
• EPSS: 0.25540
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0107
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0107
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0107/