CVE-2003-0107: zlib
- 2 references with an unsupported link type were hidden.
Vulnerability summary
CVE-2003-0107 is a high (CVSS 7.5) vulnerability in zlib. EPSS estimates a 25.99% chance of exploitation in the next 30 days, higher than 97.9% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 01-09-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
25.99%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 25.99% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (online.securityfocus.com)
Maturity: unknown
Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (1)
Maturity: poc
Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (2)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- zlib< 1:1.1.4-10
Zlib1 product
- zlib1.1.4
2 vendors · 2 products
References
18 links- lists.apple.com/mhonarc/security-announce/msg00038.htmlX Refsource CONFIRM
