APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Link | Tags |
---|---|
https://sourceforge.net/projects/apng/files/APNG_Optimizer/ | product |
https://bitbucket.org/tiangeng_zq/cve/src/main/ | exploit |