Summary
It was discovered that OptiPNG incorrectly handled memory. A remote
attacker could use this issue with a specially crafted image file to cause
OptiPNG to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | optipng | 0.6.4-1ubuntu0.14.04.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | optipng | 0.7.6-1ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or c…
References
-
report
https://ubuntu.com/security/CVE-2017-1000229