← Back

Paul Marquess

paul_marquess

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Compress Raw Zlib Perl Module
compress-raw-zlib_perl_module
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-1391
1Paul Marquess
1Compress Raw Zlib Perl Module
Apr 23, 2026
Jun 16, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of s...Show more
Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009.Show less