Buffer Overflow Vulnerability in zlib Affects Multiple Products
CVE-2005-2096

Currently unrated

Key Information:

Vendor

Zlib

Status
Zlib
Vendor
CVE Published:
6 July 2005

What is CVE-2005-2096?

The zlib library, utilized in many applications, has a vulnerability that allows remote attackers to trigger a denial of service by exploiting a crafted compressed stream. This is achieved through an incomplete code description of a length that exceeds one, resulting in a buffer overflow. Attackers can leverage this flaw via specially crafted PNG files, leading to application crashes and potential disruption of services.

References

http://sunsolve.sun.com/search/document.do?assetkey=1-26-...
vendor-advisoryx_refsource_SUNALERT
http://www.debian.org/security/2006/dsa-1026
vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/17236
third-party-advisoryx_refsource_SECUNIA

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.