apng_disassembler_project - MidnightBSD Security Advisories

CVE-2017-6191 MEDIUM

Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor	Product	Version
apng_disassembler_project	apng_disassembler	*

CVE-2017-6192 MEDIUM

Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arbitrary code via a crafted image containing a malformed chunk size descriptor.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor	Product	Version
apng_disassembler_project	apng_disassembler	*

CVE-2017-6193 MEDIUM

Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted image containing a malformed image size descriptor in the IHDR chunk.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor	Product	Version
apng_disassembler_project	apng_disassembler	*

Advisories for apng_disassembler_project