zlib 1.1.4 has buffer overrun [LWN.net]

Package(s):

zlib

CVE #(s):

CAN-2003-0107

Created:

February 25, 2003

Updated:

April 29, 2003

Description:

From this Bugtraq posting: "zlib contains a function called gzprintf(). This is similar in behaviour to fprintf() except that by default, this function will smash the stack if called with arguments that expand to more than Z_PRINTF_BUFSIZE (=4096 by default) bytes."

Alerts:

Red Hat	RHSA-2003:079-01	2003-04-29
Conectiva	CLA-2003:619	2003-04-07
Gentoo	200303-25	2003-03-28
Mandrake	MDKSA-2003:033	2003-03-18
SCO Group	CSSA-2003-011.0	2003-03-10
OpenPKG	OpenPKG-SA-2003.015	2003-03-04
Sorcerer	SORCERER2003-08-25	2003-02-25

(Log in to post comments)