CVE-2002-0059

Critical

Published: 15/03/2002(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

The decompression algorithm in zlib 1.1.3 and earlier causes inflateEnd to release certain memory more than once, which may allow attackers to execute arbitrary code via malformed compression data.

Risk Assessment

This vulnerability poses a risk of arbitrary code execution by local and remote attackers, potentially leading to serious security breaches.

Recommendation

It is recommended to update zlib to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.