Home

CVE-2017-1000229

Description

Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.473

Associated Vulnerability

VulnerabilityOS Platform
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.6.4-1ubuntu0.14.04.2_i386.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.6.4-1ubuntu0.14.04.2_amd64.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.7.6-1ubuntu0.16.04.1_i386.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.7.6-1ubuntu0.16.04.1_amd64.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.7.6-1ubuntu0.17.04.1_i386.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.7.6-1ubuntu0.17.04.1_amd64.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.7.6-1ubuntu0.17.10.1_i386.debLinux
advanced PNG (Portable Network Graphics) optimizer (USN-3495-1) optipng_0.7.6-1ubuntu0.17.10.1_amd64.debLinux
optipng security update(DSA-4058-1) optipng_0.7.6-1+deb9u1_i386.debLinux
optipng security update(DSA-4058-1) optipng_0.7.6-1+deb9u1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234