NetSight
IP …
high8.8

CVE-2016-3982

Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read …

Impact

Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
DebianDebian Linux
Versions 7.0, 8.0
Optipng ProjectOptipng
through 0.7.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10

Weakness classification

CWE-119

References