CVE-2006-4335

Description

Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability."

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 1.14% Top 25%

Vendor Advisory gentoo.org Vendor Advisory novell.com Vendor Advisory redhat.com Vendor Advisory gentoo.org Vendor Advisory securityfocus.com Vendor Advisory freebsd.org Vendor Advisory openpkg.org Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory trustix.org Vendor Advisory sun.com Vendor Advisory securityfocus.com Vendor Advisory apple.com Vendor Advisory sgi.com Vendor Advisory slackware.com Vendor Advisory debian.org

Affected: n/a n/a

References

Link	Tags
http://www.vupen.com/english/advisories/2006/4760	vdb entry
http://www.vupen.com/english/advisories/2006/4750	vdb entry
http://secunia.com/advisories/23679	third party advisory
http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml	vendor advisory
http://secunia.com/advisories/24435	third party advisory
http://secunia.com/advisories/22085	third party advisory
http://secunia.com/advisories/22043	third party advisory
http://www.novell.com/linux/security/advisories/2006_56_gzip.html	vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm
http://secunia.com/advisories/22487	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29040	vdb entry
https://issues.rpath.com/browse/RPL-615
http://secunia.com/advisories/22033	third party advisory
http://secunia.com/advisories/22002	third party advisory
http://www.vupen.com/english/advisories/2006/3695	vdb entry
http://docs.info.apple.com/article.html?artnum=304829
http://secunia.com/advisories/21996	third party advisory
http://secunia.com/advisories/23153	third party advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676
http://secunia.com/advisories/22009	third party advisory
http://secunia.com/advisories/22017	third party advisory
http://www.vupen.com/english/advisories/2007/0092	vdb entry
http://www.redhat.com/support/errata/RHSA-2006-0667.html	vendor advisory
http://www.kb.cert.org/vuls/id/381508	third party advisory us government resource
http://www.vupen.com/english/advisories/2007/1171	vdb entry
http://security.gentoo.org/glsa/glsa-200609-13.xml	vendor advisory
http://www.securityfocus.com/archive/1/451324/100/0/threaded	vendor advisory
http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc	vendor advisory
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html	vendor advisory
http://www.ubuntu.com/usn/usn-349-1	vendor advisory
http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html
http://secunia.com/advisories/22435	third party advisory
http://secunia.com/advisories/23156	third party advisory
http://www.securityfocus.com/archive/1/464268/100/0/threaded	mailing list
http://secunia.com/advisories/22027	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:167	vendor advisory
http://secunia.com/advisories/23155	third party advisory
http://www.securityfocus.com/archive/1/462007/100/0/threaded	vendor advisory
http://www.securityfocus.com/bid/20101	vdb entry
http://www.trustix.org/errata/2006/0052/	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10391	vdb entry signature
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1	vendor advisory
http://www.securityfocus.com/archive/1/450078/100/0/threaded	vendor advisory
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html	vendor advisory
http://www.us-cert.gov/cas/techalerts/TA06-333A.html	third party advisory us government resource
http://www.securityfocus.com/archive/1/446426/100/0/threaded	mailing list
http://secunia.com/advisories/24636	third party advisory
http://secunia.com/advisories/22012	third party advisory
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	vendor advisory
http://securitytracker.com/id?1016883	vdb entry
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852	vendor advisory
http://secunia.com/advisories/22034	third party advisory
http://secunia.com/advisories/22101	third party advisory
http://www.us.debian.org/security/2006/dsa-1181	vendor advisory
http://www.vupen.com/english/advisories/2007/0832	vdb entry
http://secunia.com/advisories/22661	third party advisory
http://www.vupen.com/english/advisories/2006/4275	vdb entry

Frequently Asked Questions

What is the severity of CVE-2006-4335?: CVE-2006-4335 has been scored as a high severity vulnerability.
How to fix CVE-2006-4335?: To fix CVE-2006-4335, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-4335 being actively exploited in the wild?: It is possible that CVE-2006-4335 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.