IBM Corporation Information for VU#142121
zlib "gzprintf()" function vulnerable to buffer overflow
- Vendor Information Help Date Notified: 23 May 2003
- Statement Date:
- Date Updated: 27 May 2003
The AIX operating system is not vulnerable to the issues discussed in Vulnerability Note VU#142121.
However, zlib is available for installation on AIX via the AIX Toolbox for Linux. These items are shipped "as is" and are unwarranted.
A patched version of the zlib library can be downloaded from:
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.