| Package | Affected versions | Patched versions |
|---|---|---|
| gzip | = 1.2.4= 1.2.4a= 1.3= 1.3.1= 1.3.10= 1.3.11= 1.3.12= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.3.9≤ 1.3.13 |
Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free