|
JZLib Denial Of Service Vulnerability
JZlib is a re-implementation of the zlib compression library, written entirely in Java. It can be used on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to crash JZlib with a specially-crafted block of invalid deflated data. This causes a NullPointerException to be thrown. This may cause a denial of service to applications which use the library. It has not been determined whether this issue may be exploited to execute arbitrary code. Though the possibility seems unlikely. |
|
|
Privacy Statement |
