CVE-2006-4338

unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

🔗 References (114)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc
• secalert@redhathttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676
• secalert@redhathttp://docs.info.apple.com/article.html?artnum=304829
• secalert@redhathttp://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
• secalert@redhathttp://secunia.com/advisories/21996
• secalert@redhathttp://secunia.com/advisories/22002
• secalert@redhathttp://secunia.com/advisories/22009
• secalert@redhathttp://secunia.com/advisories/22012
• secalert@redhathttp://secunia.com/advisories/22017
• secalert@redhathttp://secunia.com/advisories/22027
• secalert@redhathttp://secunia.com/advisories/22033
• secalert@redhathttp://secunia.com/advisories/22034
• secalert@redhathttp://secunia.com/advisories/22043
• secalert@redhathttp://secunia.com/advisories/22085
• secalert@redhathttp://secunia.com/advisories/22101