CVE-2002-0059: Double Free
Published Mar 15, 2002
·Updated
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.
Affected Software
15 affected components
zlib zlib<=1.1.3
zlib zlib=1.1.1
zlib zlib=1.0.1
zlib zlib=1.0
zlib zlib=1.0.5
zlib zlib=1.0.3
zlib zlib=1.1
zlib zlib=1.0.2
zlib zlib=1.0.6
zlib zlib=1.0.4
zlib zlib=1.0.7
zlib zlib=1.1.2
zlib zlib=1.0.8
zlib zlib=1.1.3
zlib zlib=1.0.9
Remediation
Patch Available
Patch Available
Event History
Mar 15, 2002
CVE Published
via NVD·05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0059?
CVE-2002-0059 is classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2002-0059?
To fix CVE-2002-0059, upgrade to zlib version 1.1.4 or later.
3
What does CVE-2002-0059 affect?
CVE-2002-0059 affects zlib versions 1.1.3 and earlier.
4
Can CVE-2002-0059 be exploited remotely?
Yes, CVE-2002-0059 can be exploited by attackers remotely through malformed compression data.
5
What are the consequences of CVE-2002-0059?
The consequences of CVE-2002-0059 include the potential for arbitrary code execution leading to system compromise.