Summary
Dileep Kumar Jallepalli discovered that apng2gif incorrectly handled
loading APNG files. An attacker could exploit this with a crafted APNG
file to access sensitive information. (CVE-2017-6960)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | apng2gif | 1.5-3+deb8u1build0.16.04.1 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, relat…
References
-
report
https://ubuntu.com/security/CVE-2017-6960