CVSS: 5.0EPSS: 8%CPEs: 1EXPL: 0CVE-2006-4338
https://notcve.org/view.php?id=CVE-2006-4338
unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive. unlzh.c en el componente LHZ en gzip 1.3.5 permite a atacantes dependientes de contexto provocar una denegación de servicio (bucle infinito) vía un archivo GZIP artesanal. • ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676 http://docs.info.apple.com/article.html?artnum=304829 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html http://secunia.com/advisories/21996 http://secunia.com/advisories/22002 http://secunia.com/advisories/22009 http://secunia.com/advisories/22012 http://secunia.com/advisories/22017 http://secunia.com/advisories/22027 http:&#x •
CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 0CVE-2006-4337 – multiple vulnerabilities in lha
https://notcve.org/view.php?id=CVE-2006-4337
Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive. Desbordamiento de búfer en la función make_table en el componente LHZ en gzip 1.3.5 permite a atacantes dependientes de contexto ejecutar código de su elección vía una tabla de decodificación artesanal en un archivo GZIP. • ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676 http://docs.info.apple.com/article.html?artnum=304829 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html http://secunia.com/advisories/21996 http://secunia.com/advisories/22002 http://secunia.com/advisories/22009 http://secunia.com/advisories/22012 http://secunia.com/advisories/22017 http://secunia.com/advisories/22027 http:&#x •
CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0CVE-2006-4335 – multiple vulnerabilities in lha
https://notcve.org/view.php?id=CVE-2006-4335
Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability." Error de índice de array en la función make_table en unlzh.c en el componente de descompresión LZH en gzip 1.3.5, cuando se ejecuta en ciertas plataformas, permite a atacantes dependientes de contexto provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección vía un archivo GZIP artesanal que dispara una escritura fuera de rango, también conocida como "vulnerabilidad de modificación de pila". • ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676 http://docs.info.apple.com/article.html?artnum=304829 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html http://secunia.com/advisories/21996 http://secunia.com/advisories/22002 http://secunia.com/advisories/22009 http://secunia.com/advisories/22012 http://secunia.com/advisories/22017 http://secunia.com/advisories/22027 http:&#x •
CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 0CVE-2006-4336 – multiple vulnerabilities in lha
https://notcve.org/view.php?id=CVE-2006-4336
Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index. Desbordamiento de búfer en la función build_tree en gzip 1.3.5 permite a atacantes dependientes de contexto ejecutar código de su elección vía una tabla de contadores de hoja artesanal que provoca una escritura en un índice negativo. • ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676 http://docs.info.apple.com/article.html?artnum=304829 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html http://secunia.com/advisories/21996 http://secunia.com/advisories/22002 http://secunia.com/advisories/22009 http://secunia.com/advisories/22012 http://secunia.com/advisories/22017 http://secunia.com/advisories/22027 http:&#x •
CVSS: 5.0EPSS: 8%CPEs: 1EXPL: 0CVE-2006-4334
https://notcve.org/view.php?id=CVE-2006-4334
Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference. Vulnerabilidad no especificada en gzip 1.3.5 permite a atacantes dependientes de contexto causar una denegación de servicio (caída) vía un archivo GZIP (gz) artesanal, lo cual resulta en una referencia a NULL. • ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676 http://docs.info.apple.com/article.html?artnum=304829 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html http://secunia.com/advisories/21996 http://secunia.com/advisories/22002 http://secunia.com/advisories/22009 http://secunia.com/advisories/22012 http://secunia.com/advisories/22017 http://secunia.com/advisories/22027 http:&#x •