NVD

Id
62974  
Name
CVE-2006-4335  
Description
Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-19  
Modified Date
2013-08-29  
Seq
2006-4335  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327512 62974 CVE-2006-4335 20061001-01-P  View
327513 62974 CVE-2006-4335 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676  View
327514 62974 CVE-2006-4335 http://docs.info.apple.com/article.html?artnum=304829  View
327515 62974 CVE-2006-4335 APPLE-SA-2006-11-28  View
327516 62974 CVE-2006-4335 oval:org.mitre.oval:def:10391  View
327517 62974 CVE-2006-4335 FreeBSD-SA-06:21  View
327518 62974 CVE-2006-4335 GLSA-200609-13  View
327519 62974 CVE-2006-4335 1016883  View
327520 62974 CVE-2006-4335 SSA:2006-262  View
327521 62974 CVE-2006-4335 102766  View
327522 62974 CVE-2006-4335 http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm  View
327523 62974 CVE-2006-4335 GLSA-200611-24  View
327524 62974 CVE-2006-4335 VN#381508  View
327525 62974 CVE-2006-4335 MDKSA-2006:167  View
327526 62974 CVE-2006-4335 SUSE-SA:2006:056  View
327527 62974 CVE-2006-4335 OpenPKG-SA-2006.020  View
327528 62974 CVE-2006-4335 RHSA-2006:0667  View
327529 62974 CVE-2006-4335 20060919 rPSA-2006-0170-1 gzip  View
327530 62974 CVE-2006-4335 SSRT061237  View
327531 62974 CVE-2006-4335 FLSA:211760  View
327532 62974 CVE-2006-4335 HPSBUX02195  View
327533 62974 CVE-2006-4335 20070330 VMSA-2007-0002 VMware ESX security updates  View
327534 62974 CVE-2006-4335 20101  View
327535 62974 CVE-2006-4335 2006-0052  View
327536 62974 CVE-2006-4335 USN-349-1  View
327537 62974 CVE-2006-4335 TA06-333A  View
327538 62974 CVE-2006-4335 DSA-1181  View
327539 62974 CVE-2006-4335 http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html  View
327540 62974 CVE-2006-4335 ADV-2006-3695  View
327541 62974 CVE-2006-4335 ADV-2006-4275  View
327542 62974 CVE-2006-4335 ADV-2006-4750  View
327543 62974 CVE-2006-4335 ADV-2006-4760  View
327544 62974 CVE-2006-4335 ADV-2007-0092  View
327545 62974 CVE-2006-4335 ADV-2007-0832  View
327546 62974 CVE-2006-4335 ADV-2007-1171  View
327547 62974 CVE-2006-4335 gzip-lzh-array-code-execution(29040)  View
327548 62974 CVE-2006-4335 https://issues.rpath.com/browse/RPL-615  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58372 JVNDB-2006-000568 gzip の make_table() の配列処理における脆弱性 gzip (GNU zip) はファイルを圧縮・解凍する機能を提供するプログラムです。この gzip には、スタックオーバーフローの脆弱性が存在します。 CVE-2006-4335 20437 CVE-2006-4335 62974 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000568.html 2006-09-19 2007-06-26 View