CVE-2005-2096
HighExploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
A vulnerability in zlib version 1.2 and later allows remote attackers to cause a denial of service (crash) by sending a crafted compressed stream with an incomplete code description of a length greater than 1, leading to a buffer overflow. This is demonstrated using a crafted PNG file.
Risk Assessment
An attacker can remotely crash applications using the vulnerable zlib version, resulting in service disruption and potential loss of system availability.
Recommendation
Immediately update zlib to version 1.2.3 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.