CVE-2006-4335: High severity gzip gzip vulnerability
Array index error in the maketable function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4335?
CVE-2006-4335 is classified as a moderate severity vulnerability due to its potential for causing denial of service and possibly executing arbitrary code.
How do I fix CVE-2006-4335?
To remediate CVE-2006-4335, users should upgrade to a patched version of gzip that addresses the vulnerability.
What does CVE-2006-4335 affect?
CVE-2006-4335 specifically affects gzip version 1.3.5, particularly when running on certain platforms.
Can CVE-2006-4335 be exploited remotely?
Yes, CVE-2006-4335 can be exploited by an attacker through a crafted GZIP archive which can trigger the vulnerability.
What are the consequences of CVE-2006-4335?
The consequences of CVE-2006-4335 include the potential for denial of service, which can crash the application, and executing arbitrary code.