[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96078

 
 

909

 
 

78009

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2008-5101

Date: (C)2008-11-17   (M)2017-08-08
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."

Reference:
BID-32248
SECUNIA-32651
SECUNIA-34259
ADV-2008-3108
GLSA-200812-01
SUSE-SR:2009:006
http://openwall.com/lists/oss-security/2008/11/12/1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505399
http://optipng.sourceforge.net/
http://prdownloads.sourceforge.net/optipng/optipng-0.6.1.1.diff?download
http://sourceforge.net/project/shownotes.php?release_id=639631&group_id=151404
optipng-bmpreader-bo(46519)

CWE    1
CWE-119

© 2013 SecPod Technologies