CVE-2006-4335

Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability."

🔗 References (114)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
• secalert@redhathttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676
• secalert@redhathttp://docs.info.apple.com/article.html?artnum=304829
• secalert@redhathttp://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
• secalert@redhathttp://secunia.com/advisories/21996
• secalert@redhathttp://secunia.com/advisories/22002
• secalert@redhathttp://secunia.com/advisories/22009
• secalert@redhathttp://secunia.com/advisories/22012
• secalert@redhathttp://secunia.com/advisories/22017
• secalert@redhathttp://secunia.com/advisories/22027
• secalert@redhathttp://secunia.com/advisories/22033
• secalert@redhathttp://secunia.com/advisories/22034
• secalert@redhathttp://secunia.com/advisories/22043
• secalert@redhathttp://secunia.com/advisories/22085
• secalert@redhathttp://secunia.com/advisories/22101