CVE-2017-1000229

OptiPNG could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #882032 optipng: CVE-2017-1000229: Integer Overflow Bug while parsing TIFF input file Package: src:optipng; Maintainer for src:optipng is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 17 Nov 2017 1 ...

Debian Bug report logs - #878839 optipng: CVE-2017-16938: global-buffer-overflow bug while parsing GIF file Package: optipng; Maintainer for optipng is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Source for optipng is src:optipng (PTS, buildd, popcon) Reported by: Joonun Jang <joonunjang ...

Two vulnerabilities were discovered in optipng, an advanced PNG optimizer, which may result in denial of service or the execution of arbitrary code if a malformed file is processed For the oldstable distribution (jessie), these problems have been fixed in version 075-1+deb8u2 For the stable distribution (stretch), these problems have been fixed ...

An integer overflow flaw leading to heap memory corruption was found in the way OptiPNG handles processing of TIFF files This flaw could potentially be used to crash the OptiPNG program by tricking it into processing crafted TIFF files ...