Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-4336 Details

Description

Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	CVE
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676	CVE
http://docs.info.apple.com/article.html?artnum=304829	CVE
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html	CVE
http://secunia.com/advisories/21996	CVE
http://secunia.com/advisories/22002	CVE
http://secunia.com/advisories/22009	CVE	Vendor Advisory
http://secunia.com/advisories/22012	CVE	PatchVendor Advisory
http://secunia.com/advisories/22017	CVE	Vendor Advisory
http://secunia.com/advisories/22027	CVE
http://secunia.com/advisories/22033	CVE	Vendor Advisory
http://secunia.com/advisories/22034	CVE	Vendor Advisory
http://secunia.com/advisories/22043	CVE	PatchVendor Advisory
http://secunia.com/advisories/22085	CVE
http://secunia.com/advisories/22101	CVE
http://secunia.com/advisories/22435	CVE
http://secunia.com/advisories/22487	CVE
http://secunia.com/advisories/22661	CVE
http://secunia.com/advisories/23153	CVE
http://secunia.com/advisories/23155	CVE
http://secunia.com/advisories/23156	CVE
http://secunia.com/advisories/23679	CVE
http://secunia.com/advisories/24435	CVE
http://secunia.com/advisories/24636	CVE
http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc	CVE
http://security.gentoo.org/glsa/glsa-200609-13.xml	CVE
http://securitytracker.com/id?1016883	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/29042	CVE
https://issues.rpath.com/browse/RPL-615	CVE
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10140	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1	CVE
http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm	CVE
http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml	CVE
http://www.kb.cert.org/vuls/id/554780	CVE	US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2006:167	CVE
http://www.novell.com/linux/security/advisories/2006_56_gzip.html	CVE
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html	CVE
http://www.redhat.com/support/errata/RHSA-2006-0667.html	CVE
http://www.securityfocus.com/archive/1/446426/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/450078/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/451324/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/462007/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/464268/100/0/threaded	CVE
http://www.securityfocus.com/bid/20101	CVE
http://www.trustix.org/errata/2006/0052/	CVE
http://www.ubuntu.com/usn/usn-349-1	CVE
http://www.us-cert.gov/cas/techalerts/TA06-333A.html	CVE	US Government Resource
http://www.us.debian.org/security/2006/dsa-1181	CVE
http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html	CVE
http://www.vupen.com/english/advisories/2006/3695	CVE
http://www.vupen.com/english/advisories/2006/4275	CVE
http://www.vupen.com/english/advisories/2006/4750	CVE
http://www.vupen.com/english/advisories/2006/4760	CVE
http://www.vupen.com/english/advisories/2007/0092	CVE
http://www.vupen.com/english/advisories/2007/0832	CVE
http://www.vupen.com/english/advisories/2007/1171	CVE
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	[email protected]
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676	[email protected]
http://docs.info.apple.com/article.html?artnum=304829	[email protected]
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html	[email protected]
http://secunia.com/advisories/21996	[email protected]
http://secunia.com/advisories/22002	[email protected]
http://secunia.com/advisories/22009	[email protected]	Vendor Advisory
http://secunia.com/advisories/22012	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/22017	[email protected]	Vendor Advisory
http://secunia.com/advisories/22027	[email protected]
http://secunia.com/advisories/22033	[email protected]	Vendor Advisory
http://secunia.com/advisories/22034	[email protected]	Vendor Advisory
http://secunia.com/advisories/22043	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/22085	[email protected]
http://secunia.com/advisories/22101	[email protected]
http://secunia.com/advisories/22435	[email protected]
http://secunia.com/advisories/22487	[email protected]
http://secunia.com/advisories/22661	[email protected]
http://secunia.com/advisories/23153	[email protected]
http://secunia.com/advisories/23155	[email protected]
http://secunia.com/advisories/23156	[email protected]
http://secunia.com/advisories/23679	[email protected]
http://secunia.com/advisories/24435	[email protected]
http://secunia.com/advisories/24636	[email protected]
http://security.freebsd.org/advisories/FreeBSD-SA-06:21.gzip.asc	[email protected]
http://security.gentoo.org/glsa/glsa-200609-13.xml	[email protected]
http://securitytracker.com/id?1016883	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/29042	[email protected]
https://issues.rpath.com/browse/RPL-615	[email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.555852	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10140	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102766-1	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2006-218.htm	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200611-24.xml	[email protected]
http://www.kb.cert.org/vuls/id/554780	[email protected]	US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2006:167	[email protected]
http://www.novell.com/linux/security/advisories/2006_56_gzip.html	[email protected]
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.020-gzip.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2006-0667.html	[email protected]
http://www.securityfocus.com/archive/1/446426/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/450078/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/451324/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/462007/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/464268/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/20101	[email protected]
http://www.trustix.org/errata/2006/0052/	[email protected]
http://www.ubuntu.com/usn/usn-349-1	[email protected]
http://www.us-cert.gov/cas/techalerts/TA06-333A.html	[email protected]	US Government Resource
http://www.us.debian.org/security/2006/dsa-1181	[email protected]
http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html	[email protected]
http://www.vupen.com/english/advisories/2006/3695	[email protected]
http://www.vupen.com/english/advisories/2006/4275	[email protected]
http://www.vupen.com/english/advisories/2006/4750	[email protected]
http://www.vupen.com/english/advisories/2006/4760	[email protected]
http://www.vupen.com/english/advisories/2007/0092	[email protected]
http://www.vupen.com/english/advisories/2007/0832	[email protected]
http://www.vupen.com/english/advisories/2007/1171	[email protected]

see all 114 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
gzip gzip	1.3.5
CPE cpe:2.3:a:gzip:gzip:1.3.5:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 17, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Sep 21, 2006	Initial Analysis	[email protected]