Unscored severity · published Mar 7, 2003
CVE-2003-0107
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a…
–
CVSS
26%
EPSS
No
On KEV
Description
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)26.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZL
Zlib · Zlib
1.1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0107
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0107
distro.conectiva.com
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000619
jvn.jp
http://jvn.jp/en/jp/JVN78689801/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html
lists.apple.com
http://lists.apple.com/mhonarc/security-announce/msg00038.html
More from Zlib
9.8
CVE-2023-45853
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field
9.8
CVE-2022-37434
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field
9.8
CVE-2016-9843
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
9.8
CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
9.8
CVE-2002-0059
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double…