Summary
Choi Jaeseung discovered that pngquant incorrectly handled certain PNG
images, leading to a buffer overflow. An attacker could possibly use this
issue to cause pngquant to crash or execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | pngquant | 2.5.0-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have…
References
-
report
https://ubuntu.com/security/CVE-2016-5735