[SM-Security] [Bug 2850] New: Zlib Compression Library gzprintf() Buffer Overrun Vulnerability

bugzilla-daemon at metalab.unc.edu bugzilla-daemon at metalab.unc.edu
Wed Mar 19 08:34:20 EST 2003


http://bugs.sourcemage.org/show_bug.cgi?id=2850

           Summary: Zlib Compression Library gzprintf() Buffer Overrun
                    Vulnerability
           Product: Security
           Version: unspecified
          Platform: All
               URL: http://www.securityfocus.com/bid/6913/solution/
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Security Issue
        AssignedTo: sm-security at lists.ibiblio.org
        ReportedBy: shivaken at jcom.home.ne.jp


Zlib Compression Library gzprintf() Buffer Overrun Vulnerability is found. 
see http://www.securityfocus.com/bid/6913/ 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0107 
 
Patch is at 
http://www.securityfocus.com/data/vulnerabilities/patches/zlib-1.1.4-3-vsnprintf.patch



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


More information about the SM-Security mailing list