Vulnerability in Zlib

CVE-2005-2096

zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.

EPSS: 0.055 (91.9th percentile) — read the EPSS interpretation.

Affected products

  • Zlib — versions 1.2.0, 1.2.1, 1.2.2
  • N/a — versions n/a

References