{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2005-2096","sourceIdentifier":"secalert@redhat.com","published":"2005-07-06T04:00:00.000","lastModified":"2026-07-14T12:16:44.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"CADRA","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2511","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zlib:zlib:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9E8D0212-4805-4C50-A8C7-7A2AF3424929"},{"vulnerable":true,"criteria":"cpe:2.3:a:zlib:zlib:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C493104-5D6B-417F-BD77-32A4868A3398"},{"vulnerable":true,"criteria":"cpe:2.3:a:zlib:zlib:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"6C77C974-9A8A-4F22-A680-5095552589BB"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc","source":"secalert@redhat.com"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/15949","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/17054","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17225","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17236","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17326","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17516","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18377","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18406","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/18507","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/19550","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/19597","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24788","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/31492","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/32706","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200507-05.xml","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014398","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3298","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2005/dsa-740","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-797","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1026","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/680620","source":"secalert@redhat.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:112","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:196","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:070","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-569.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/421411/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/464745/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/482503/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/482505/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/482571/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/482601/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/482949/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/482950/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/14162","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.ubuntulinux.org/usn/usn-151-3","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2005/0978","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/0144","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1267","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24064","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/148-1/","source":"secalert@redhat.com"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:16.zlib.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/15949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/17054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/32706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200507-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101989-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT3298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200509-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/680620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-569.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/421411/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464745/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482503/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482505/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482571/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482601/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482949/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/482950/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/14162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntulinux.org/usn/usn-151-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3616065-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9916286-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/0978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/0144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/148-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-470355.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}}