Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-16938

Опубликовано: 24 нояб. 2017
Источник: redhat
CVSS3: 3.3

Описание

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.

An invalid memory write flaw was found in the way OptiPNG handles processing of GIF files. This flaw could potentially be used to crash the OptiPNG program by tricking it into processing crafted GIF files.

Отчет

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7optipngWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=1520227optipng: global buffer overflow in gifread.c:LZWReadByte when parsing malicious GIF

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.

CVSS3: 7.8
nvd
около 8 лет назад

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.

CVSS3: 7.8
debian
около 8 лет назад

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to c ...

CVSS3: 7.8
github
больше 3 лет назад

A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.

suse-cvrf
около 8 лет назад

Security update for optipng

3.3 Low

CVSS3