Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-2191

Опубликовано: 04 апр. 2016
Источник: redhat
CVSS2: 3.3

Описание

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

Отчет

Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7optipngWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=1308550optipng: Invalid write while processing delta escapes without any boundary checking

3.3 Low

CVSS2

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 10 лет назад

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

CVSS3: 6.5
nvd
почти 10 лет назад

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

CVSS3: 6.5
debian
почти 10 лет назад

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0. ...

CVSS3: 6.5
github
больше 3 лет назад

The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (invalid memory write and crash) via a series of delta escapes in a crafted BMP image.

suse-cvrf
почти 10 лет назад

Security update for optipng

3.3 Low

CVSS2