The ncompress utility is prone to a buffer-underflow vulnerability. When ncompress decompresses data, it fails to perform appropriate bounds checking, which may allow certain decompress operations to underflow an internal buffer. This may cause unpredictable effects on vulnerable systems.
Credit:
The original article can be found at: http://www.securityfocus.com/bid/19455
The information has been provided by Tavis Ormandy discovered this vulnerability. .
