CVE-2006-1168
CVE-2006-1168
The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.
Produtos afetados
n/a · n/aQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.aschttp://bugs.gentoo.org/show_bug.cgi?id=141728http://downloads.avaya.com/css/P8/documents/100158840http://rhn.redhat.com/errata/RHSA-2012-0810.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=728536http://secunia.com/advisories/21427http://secunia.com/advisories/21434http://secunia.com/advisories/21437http://secunia.com/advisories/21467http://secunia.com/advisories/21880http://secunia.com/advisories/22036http://secunia.com/advisories/22296