PT-2016-1708 · Optipng+2 · Optipng+2
Henri Salo
·
Publicado
2016-04-07
·
Atualizado
2021-07-31
·
CVE-2016-3982
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OptiPNG versions prior to 0.7.6
Description
The issue is caused by an off-by-one error in the
bmp rle4 fread function, leading to a heap-based buffer overflow when processing a crafted image file. This can result in a denial of service, such as an out-of-bounds read or write access and crash, or possibly allow remote attackers to execute arbitrary code.Recommendations
For versions prior to 0.7.6, update to version 0.7.6 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the
bmp rle4 fread function in the pngxrbmp.c file until a patch is available. Restrict access to crafted image files to minimize the risk of exploitation.Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Optipng
Ubuntu