CVE-2003-0107
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- EPSS
- 26% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- zlib:zlib
References
- ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-011.0.txt
- ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-004.txt.asc
- http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000619
- http://jvn.jp/en/jp/JVN78689801/index.html
- http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html