CVE-2002-0059

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.

• CWE-415

• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txtBroken Link
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469Broken Link
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022Broken Link
• http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txtBroken Link
• http://www.cert.org/advisories/CA-2002-07.htmlThird Party Advisory, US Government Resource
• http://www.debian.org/security/2002/dsa-122Broken Link
• http://www.kb.cert.org/vuls/id/368819Third Party Advisory, US Government Resource
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.phpBroken Link, Patch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3Broken Link
• http://www.redhat.com/support/errata/RHSA-2002-026.htmlBroken Link, Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2002-027.htmlBroken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/4267Broken Link, Third Party Advisory, VDB Entry
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030Broken Link
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036Broken Link
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8427Third Party Advisory, VDB Entry
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txtBroken Link
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469Broken Link
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022Broken Link
• http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txtBroken Link
• http://www.cert.org/advisories/CA-2002-07.htmlThird Party Advisory, US Government Resource
• http://www.debian.org/security/2002/dsa-122Broken Link
• http://www.kb.cert.org/vuls/id/368819Third Party Advisory, US Government Resource
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.phpBroken Link, Patch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3Broken Link
• http://www.redhat.com/support/errata/RHSA-2002-026.htmlBroken Link, Patch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2002-027.htmlBroken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/4267Broken Link, Third Party Advisory, VDB Entry
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030Broken Link
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036Broken Link
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8427Third Party Advisory, VDB Entry

Published

Mar 15, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0053Buffer overflow in SNMP agent service in Windows 95/98/98SE,…
• CVE-2002-0054SMTP service in (1) Microsoft Windows 2000 and (2) Internet …
• CVE-2002-0055SMTP service in Microsoft Windows 2000, Windows XP Professio…
• CVE-2002-0056Buffer overflow in SQL Server 7.0 and 2000 allows remote att…
• CVE-2002-0057XMLHTTP control in Microsoft XML Core Services 2.6 and later…
• CVE-2002-0058Vulnerability in Java Runtime Environment (JRE) allows remot…
• CVE-2002-0060IRC connection tracking helper module in the netfilter subsy…
• CVE-2002-0061Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta…
• CVE-2002-0062Buffer overflow in ncurses 5.0, and the ncurses4 compatibili…
• CVE-2002-0063Buffer overflow in ippRead function of CUPS before 1.1.14 ma…
• CVE-2002-0064Funk Software Proxy Host 3.x is installed with insecure perm…
• CVE-2002-0065Funk Software Proxy Host 3.x uses weak encryption for the Pr…