CVE-2006-4337 Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.
HighCVSS 7.5
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gzip | = 1.3.5 | No fix listed |
| debian/gzip(Debian:12) | < 1.3.5-15 | 1.3.5-15 |
| debian/gzip(Debian:13) | < 1.3.5-15 | 1.3.5-15 |
| debian/gzip(Debian:14) | < 1.3.5-15 | 1.3.5-15 |
References
- bugzilla.redhat.com
- docs.info.apple.com
- APPLE-SA-2006-11-28 vendor-advisory
- 21996 third-party-advisory
- 22002 patch third-party-advisory vendor-advisory
- 22009 patch third-party-advisory vendor-advisory
- 22012 patch third-party-advisory vendor-advisory
- 22017 patch third-party-advisory vendor-advisory
- 22027 third-party-advisory
- 22033 patch third-party-advisory vendor-advisory
- 22034 patch third-party-advisory vendor-advisory
- 22043 patch third-party-advisory vendor-advisory
- 22085 third-party-advisory
- 22101 third-party-advisory
- 22435 third-party-advisory
- 22487 third-party-advisory
- 22661 third-party-advisory
- 23153 third-party-advisory
- 23155 third-party-advisory
- 23156 third-party-advisory
- 23679 third-party-advisory
- 24435 third-party-advisory
- 24636 third-party-advisory
- FreeBSD-SA-06:21 patch vendor-advisory
- GLSA-200609-13 vendor-advisory
- 1016883 vdb-entry
- SSA:2006-262 patch vendor-advisory
- 102766 vendor-advisory
- support.avaya.com
- GLSA-200611-24 vendor-advisory
- MDKSA-2006:167 vendor-advisory
- SUSE-SA:2006:056 vendor-advisory
- OpenPKG-SA-2006.020 vendor-advisory
- RHSA-2006:0667 vendor-advisory
- 20060919 rPSA-2006-0170-1 gzip mailing-list
- HPSBTU02168 vendor-advisory
- FLSA:211760 vendor-advisory
- HPSBUX02195 vendor-advisory
- 20070330 VMSA-2007-0002 VMware ESX security updates mailing-list
- 20101 vdb-entry
- 2006-0052 vendor-advisory
- USN-349-1 vendor-advisory
- TA06-333A third-party-advisory us-government-resource
- DSA-1181 patch vendor-advisory
- www.vmware.com
- ADV-2006-3695 vdb-entry
- ADV-2006-4275 vdb-entry
- ADV-2006-4750 vdb-entry
- ADV-2006-4760 vdb-entry
- ADV-2007-0092 vdb-entry
- ADV-2007-0832 vdb-entry
- ADV-2007-1171 vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:11212 signature vdb-entry
- Debian Security Tracker CVE-2006-4337 vendor-advisory