{"cvss":0.0,"datePublished":"2009-06-16T00:00:00Z","dateUpdated":"2009-06-16T00:00:00Z","description":"Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009.","dueDate":"","id":"CVE-2009-1391","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"compress-raw-zlib_perl_module","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"AMaViS, SpamAssassin Compress::Raw::Zlib Perl Module Denial of Service","vendor":"paul_marquess"}