CVE-2003-0107
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf...
CVE-2003-0107 is a high vulnerability (CVSS 7.5) in Zlib, published March 7, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 26.0%, the 98th percentile. Fixed in zlib 1:1.1.4-10.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 26.0%EPSS, 98th percentile
- Exploitation
- None known2 public exploits
- Fixed in
1:1.1.4-10zlib +2 more
Description
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
Exploit likelihood
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (1) | 2003-02-23 |
| Exploit-DB | Zlib 1.1.4 - Compression Library 'gzprintf()' Buffer Overrun (2) | 2003-02-23 |
What each source reports
NVD Score used
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
CVE-2003-0107- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
CVE-2003-0107- Updated
- 2026-11-02
EUVDEUVD-2003-0103No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
EUVD-2003-0103- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c9pj-8qx8-ccrwNo score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf...
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
GHSA-c9pj-8qx8-ccrw- Updated
- 2026-11-02
OSVNo score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
CVE-2003-0107- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0107No score
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
- Record
DEBIAN-CVE-2003-0107- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.apple.com/mhonarc/security-announce/msg00038.html
jvn.jp/en/jp/JVN78689801/index.html
jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000066.html
mandrakesoft.com/security/advisories?name=MDKSA-2003:033
redhat.com/support/errata/RHSA-2003-081.html
Show 14 moreShow less
marc.info?l=bugtraq&m=104887247624907&w=2
kb.cert.org/vuls/id/142121
sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57405
osvdb.org/6599
online.securityfocus.com/archive/1/312869
distro.conectiva.com/atualizacoes?id=a&anuncio=000619
securityfocus.com/bid/6913
iss.net/security_center/static/11381.php
nvd.nist.gov/vuln/detail/CVE-2003-0107
github.com/advisories/GHSA-c9pj-8qx8-ccrw
security-tracker.debian.org/tracker/CVE-2003-0107