CVE-2002-0059 The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow l...
CriticalCVSS 9.8
EPSS 9.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zlib | <= 1.1.3 | No fix listed |
References
- CLA-2002:469 broken-link vendor-advisory
- MDKSA-2002:022 broken-link vendor-advisory
- CSSA-2002-014.1 broken-link vendor-advisory
- CA-2002-07 third-party-advisory us-government-resource
- DSA-122 broken-link vendor-advisory
- VU#368819 third-party-advisory us-government-resource
- MDKSA-2002:023 broken-link patch vendor-advisory
- MDKSA-2002:024 broken-link vendor-advisory
- RHSA-2002:026 broken-link patch vendor-advisory
- RHSA-2002:027 broken-link patch vendor-advisory
- 4267 broken-link third-party-advisory vdb-entry
- HPSBTL0204-030 broken-link vendor-advisory
- HPSBTL0204-036 broken-link vendor-advisory
- HPSBTL0204-037 broken-link vendor-advisory
- zlib-doublefree-memory-corruption(8427) third-party-advisory vdb-entry