Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0107. PoCs published by CrZ, Richard Kettlewel.
AI-analyzed exploit summary This exploit leverages a buffer overflow in Zlib's gzprintf function (CVE-2003-0107) to execute arbitrary shellcode. It constructs a malicious buffer with a NOP sled and shellcode to spawn a shell, targeting Zlib versions up to 1.1.4.
Description
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a denial of service or possibly execute arbitrary code.
Exploits (2)
This exploit leverages a buffer overflow in Zlib's gzprintf function (CVE-2003-0107) to execute arbitrary shellcode. It constructs a malicious buffer with a NOP sled and shellcode to spawn a shell, targeting Zlib versions up to 1.1.4.
This exploit demonstrates a buffer overflow vulnerability in Zlib 1.1.4 via the gzprintf() function, which uses vsprintf() without proper boundary checks. The PoC attempts to trigger the overflow by writing a large format string to a gzFile handle.