CVE-2017-1000229

概要

参考情報

• lists.debian.org/debian-lts-announce/2017/11/msg00030.html · Mailing List
• security.gentoo.org/glsa/201801-02 · Third Party Advisory
• sourceforge.net/p/optipng/bugs/65 · Exploit
• debian.org/security/2017/dsa-4058 · Third Party Advisory

optipng のその他の脆弱性

• CVE-2023-43907高 7.8OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.
• CVE-2017-16938高 7.8A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a mal…
• CVE-2015-7802中 5.5gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via …
• CVE-2015-7801高 8.8Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file.
• CVE-2016-3982高 8.8Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (…