[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3546-1 optipng -- optipng

ID: oval:org.secpod.oval:def:602465Date: (C)2016-04-28   (M)2023-06-16
Class: PATCHFamily: unix




Hans Jerry Illikainen discovered that missing input sanitising in the BMP processing code of the optipng PNG optimiser may result in denial of service or the execution of arbitrary code if a malformed file is processed.

Platform:
Debian 8.x
Debian 7.x
Product:
optipng
Reference:
DSA-3546-1
CVE-2016-2191
CVE-2015-7801
CVE    2
CVE-2016-2191
CVE-2015-7801
CPE    3
cpe:/o:debian:debian_linux:7.x
cpe:/o:debian:debian_linux:8.x
cpe:/a:optipng:optipng

© SecPod Technologies