exploitDog

CVE-2020-29384

Опубликовано: 30 нояб. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters an integer overflow.

Ссылки

http://advsys.net/ken/utils.htm
Third Party Advisory
http://www.jonof.id.au/kenutils.html
Third Party Advisory
https://gist.github.com/mmmdzz/03df5177afd04b32ac190eb7907f3834
Exploit
Third Party Advisory
http://advsys.net/ken/utils.htm
Third Party Advisory
http://www.jonof.id.au/kenutils.html
Third Party Advisory
https://gist.github.com/mmmdzz/03df5177afd04b32ac190eb7907f3834
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:advsys:pngout:2020-01-15:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00201

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-7g34-hmj9-wxmc

github

больше 3 лет назад

An issue was discovered in PNGOUT 2020-01-15. When compressing a crafted PNG file, it encounters an integer overflow.

EPSS

Процентиль: 42%

0.00201

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190