CVE-2015-2158

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file.
References
Link Resource
https://sourceforge.net/p/pmt/news/2015/02/pngcrush-1784-released/ Patch Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1198171 Issue Tracking Patch Third Party Advisory
http://www.securityfocus.com/bid/72830 Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2015/03/01/1 Mailing List Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:pngcrush_project:pngcrush:*:*:*:*:*:*:*:*

Information

Published : 2017-10-06 08:29

Updated : 2017-11-01 05:51


NVD link : CVE-2015-2158

Mitre link : CVE-2015-2158


JSON object : View

CWE
CWE-189

Numeric Errors

Advertisement

dedicated server usa

Products Affected

pngcrush_project

  • pngcrush