Vulnerability in Ncompress

CVE-2006-1168

The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code, via crafted data that leads to a buffer underflow.

EPSS: 0.058 (92.3th percentile) — read the EPSS interpretation.

Affected products

  • Ncompress — versions 4.2.4
  • N/a — versions n/a

References