CVE-2016-3982
HighSummary
Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before version 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, triggering a heap-based buffer overflow.
Risk Assessment
This vulnerability may lead to system crashes or allow attackers to execute malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update OptiPNG to version 0.7.6 or later to mitigate this vulnerability.
Other vulnerabilities in OptiPNG
See all- CVE-2017-16938High
A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact using a maliciously crafted GIF format file. The issue is related to an uncontrolled loop in the LZWReadByte function of the gifread.c file.
- CVE-2017-1000229High
Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service.
- CVE-2015-7801High
Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file.
- CVE-2016-3981High
Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before version 0.7.6 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted image file.
Original NVD description (English source)
Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow.