Description
Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to "palette reduction."
References
- 55566 vdb-entry
- http://optipng.sourceforge.net/
- optipng-palette-code-execution(78743) vdb-entry
- [oss-security] 20120917 CVE request: OptiPNG Palette Reduction Use-After-Free Vulnerability mailing-list
- http://optipng.hg.sourceforge.net/hgweb/optipng/optipng/rev/f1d5d44670a2
- 50654 third-party-advisory
- http://sourceforge.net/news/?group_id=151404
- [oss-security] 20120917 Re: CVE request: OptiPNG Palette Reduction Use-After-Free Vulnerability mailing-list