CVE-2003-0107
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf...
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
CVE-2003-0107- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
CVE-2003-0107- Updated
- 2026-11-02
EUVDEUVD-2003-0103 No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
EUVD-2003-0103- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c9pj-8qx8-ccrw No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf...
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
GHSA-c9pj-8qx8-ccrw- Updated
- 2026-11-02
OSV No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
CVE-2003-0107- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0107 No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
DEBIAN-CVE-2003-0107- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (1) | 2003-02-23 |
| Exploit-DB | Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (2) | 2003-02-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0107 is a high vulnerability (CVSS 7.5) in Zlib, published March 7, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 26.0%, the 97th percentile. Fixed in zlib 1:1.1.4-10.
References
lists.apple.com/mhonarc/security-announce/msg00038.html
jvn.jp/en/jp/JVN78689801/index.html
jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html
mandrakesoft.com/security/advisories?name=MDKSA-2003:033
redhat.com/support/errata/RHSA-2003-081.html
Show 14 moreShow less
marc.info?l=bugtraq&m=104887247624907&w=2
kb.cert.org/vuls/id/142121
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57405
osvdb.org/6599
online.securityfocus.com/archive/1/312869
distro.conectiva.com/atualizacoes?id=a&anuncio=000619
securityfocus.com/bid/6913
iss.net/security_center/static/11381.php
nvd.nist.gov/vuln/detail/CVE-2003-0107
github.com/advisories/GHSA-c9pj-8qx8-ccrw
security-tracker.debian.org/tracker/CVE-2003-0107