Approved changes feed: RSS · Atom

cpe:2.3:a:paul_marquess:compress-raw-zlib_perl_module:2.003:*:*:*:*:*:*:*

part: a version: 2.003 update: *

VendorPaul Marquess (32d230a4-7710-5398-9ffc-5a62d866f739)
ProductCompress Raw Zlib Perl Module (d988621d-b34d-59e1-8d8c-dab9d92a3427)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:cpan/compress-raw-zlib purl2cpe 2026-06-01 10:15:11.699120
pkg:deb/debian/libcompress-raw-zlib-perl purl2cpe 2026-06-01 10:15:11.699121
pkg:github/pmqs/compress-raw-zlib purl2cpe 2026-06-01 10:15:11.699123
pkg:rpm/fedora/perl-compress-raw-zlib purl2cpe 2026-06-01 10:15:11.699124

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1391 vulnerable 2026-06-08 04:51:22.691353 Details available
Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009.
Published: 2009-06-16T23:00:00.000Z
Updated: 2024-08-07T05:13:25.381Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.