GCVE - cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gzip:gzip:1.3.5:*:*:*:*:*:*:*

part: a version: 1.3.5 update: *

Vendor	Gzip (`deab0989-9f8f-5d45-a506-ba0716131e1b`)
Product	Gzip (`813dbf83-2e89-5d2f-8993-0fa4b4ba4016`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4338`	vulnerable	2026-06-08 04:49:17.610794	Details available unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive. Published: 2006-09-19T21:00:00.000Z Updated: 2024-08-07T19:06:07.451Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4760 http://www.vupen.com/english/advisories/2006/4750 http://secunia.com/advisories/23679 http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml http://secunia.com/advisories/24435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4337`	vulnerable	2026-06-08 04:49:17.609973	Details available Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive. Published: 2006-09-19T21:00:00.000Z Updated: 2024-08-07T19:06:07.322Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4760 http://www.vupen.com/english/advisories/2006/4750 http://secunia.com/advisories/23679 http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml http://secunia.com/advisories/24435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4336`	vulnerable	2026-06-08 04:49:17.609161	Details available Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index. Published: 2006-09-19T21:00:00.000Z Updated: 2024-08-07T19:06:07.625Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4760 http://www.vupen.com/english/advisories/2006/4750 http://secunia.com/advisories/23679 http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml http://secunia.com/advisories/24435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4335`	vulnerable	2026-06-08 04:49:17.608335	Details available Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive that triggers an out-of-bounds write, aka a "stack modification vulnerability." Published: 2006-09-19T21:00:00.000Z Updated: 2024-08-07T19:06:07.493Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4760 http://www.vupen.com/english/advisories/2006/4750 http://secunia.com/advisories/23679 http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml http://secunia.com/advisories/24435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4334`	vulnerable	2026-06-08 04:49:17.607399	Details available Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference. Published: 2006-09-19T21:00:00.000Z Updated: 2024-08-07T19:06:07.506Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4750 http://secunia.com/advisories/23679 http://secunia.com/advisories/24435 http://secunia.com/advisories/22085 http://secunia.com/advisories/22043	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Gzip

Notes

PURL mappings

Vulnerability references

Contribute