NVD

Id
48676  
Name
CVE-2009-1391  
Description
Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-16  
Modified Date
2009-08-21  
Seq
2009-1391  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245882 48676 CVE-2009-1391 http://article.gmane.org/gmane.mail.virus.amavis.user/33635  View
245883 48676 CVE-2009-1391 http://article.gmane.org/gmane.mail.virus.amavis.user/33638  View
245884 48676 CVE-2009-1391 SUSE-SR:2009:012  View
245885 48676 CVE-2009-1391 GLSA-200908-07  View
245886 48676 CVE-2009-1391 http://thread.gmane.org/gmane.mail.virus.amavis.user/33635  View
245887 48676 CVE-2009-1391 MDVSA-2009:157  View
245888 48676 CVE-2009-1391 35307  View
245889 48676 CVE-2009-1391 USN-794-1  View
245890 48676 CVE-2009-1391 ADV-2009-1571  View
245891 48676 CVE-2009-1391 perl-compressrawzlib-inflate-bo(51062)  View
245892 48676 CVE-2009-1391 https://bugs.gentoo.org/show_bug.cgi?id=273141  View
245893 48676 CVE-2009-1391 https://bugzilla.redhat.com/show_bug.cgi?id=504386  View
245894 48676 CVE-2009-1391 FEDORA-2009-7680  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43588 JVNDB-2009-004595 AMaViS などの製品で使用される Compress::Raw::Zlib Perl モジュールにおけるサービス運用妨害 (DoS) の脆弱性 AMaViS および SpamAssassin などで使用される Compress::Raw::Zlib Perl モジュールの Zlib.xs の inflate 関数は、一つずれエラー (Off-by-one) が発生するため、サービス運用妨害 (ハングまたはクラッシュ) 状態となる脆弱性が存在します。 CVE-2009-1391 38822 CVE-2009-1391 48676 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004595.html 2009-06-16 2012-09-25 View