FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1849

This CVE name corresponds to:

Entered	Topic
2005-08-05	zlib -- buffer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1849 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1849
Phase	Assigned(20050606)

Description

inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.

References

Source	Reference
BUGTRAQ	20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates
CONFIRM	http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html
CONFIRM	http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html
APPLE	APPLE-SA-2005-08-15
APPLE	APPLE-SA-2005-08-17
DEBIAN	DSA-763
DEBIAN	DSA-797
DEBIAN	DSA-1026
FEDORA	FLSA:162680
GENTOO	GLSA-200509-18
GENTOO	GLSA-200603-18
MANDRIVA	MDKSA-2005:196
MANDRIVA	MDKSA-2006:070
REDHAT	RHSA-2005:584
REDHAT	RHSA-2008:0629
SCO	SCOSA-2006.6
SUSE	SUSE-SA:2005:043
UBUNTU	USN-151-3
MISC	http://security.debian.org/pool/updates/main/z/zlib/zlib_1.2.2-4.sarge.2.diff.gz
BID	14340
OVAL	oval:org.mitre.oval:def:11402
VUPEN	ADV-2007-1267
OSVDB	18141
SECTRACK	1014540
SECUNIA	16137
SECUNIA	18377
SECUNIA	17326
SECUNIA	17516
SECUNIA	19550
SECUNIA	19334
SECUNIA	19597
SECUNIA	24788
SECUNIA	31492
XF	zlib-codetable-dos(21456)