Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
605
VMScore

CVE-2017-16938

Published: 24/11/2017 Updated: 04/02/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Optipng Project

Vulnerability Summary

A global buffer overflow in OptiPNG 0.7.6 allows remote malicious users to cause a denial-of-service attack or other unspecified impact with a maliciously crafted GIF format file, related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.

Vulnerable Product Search on Vulmon Subscribe to Product

optipng project optipng 0.7.6

Vendor Advisories

Debian CVElist Bug Report Logs: optipng: CVE-2017-1000229: Integer Overflow Bug while parsing TIFF input file
Debian Bug report logs - #882032 optipng: CVE-2017-1000229: Integer Overflow Bug while parsing TIFF input file Package: src:optipng; Maintainer for src:optipng is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 17 Nov 2017 1 ...
Debian CVElist Bug Report Logs: optipng: CVE-2017-16938: global-buffer-overflow bug while parsing GIF file
Debian Bug report logs - #878839 optipng: CVE-2017-16938: global-buffer-overflow bug while parsing GIF file Package: optipng; Maintainer for optipng is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Source for optipng is src:optipng (PTS, buildd, popcon) Reported by: Joonun Jang <joonunjang ...
Debian Security Advisories: DSA-4058-1 optipng -- security update
Two vulnerabilities were discovered in optipng, an advanced PNG optimizer, which may result in denial of service or the execution of arbitrary code if a malformed file is processed For the oldstable distribution (jessie), these problems have been fixed in version 075-1+deb8u2 For the stable distribution (stretch), these problems have been fixed ...
Red Hat: CVE-2017-16938
An invalid memory write flaw was found in the way OptiPNG handles processing of GIF files This flaw could potentially be used to crash the OptiPNG program by tricking it into processing crafted GIF files ...

References

CWE-119https://sourceforge.net/p/optipng/bugs/69/https://www.debian.org/security/2017/dsa-4058https://security.gentoo.org/glsa/201801-02https://lists.debian.org/debian-lts-announce/2017/11/msg00042.htmlhttps://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882032https://www.debian.org/security/./dsa-4058
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21987buffer overflowCVE-2024-28890CVE-2024-27574CVE-2024-27347CVE-2024-31450privilegeSSTICVE-2024-31666
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook