oss-sec mailing list archives

CVE request: optipng security release

From: Marcus Meissner <meissner () suse de>
Date: Tue, 24 Feb 2009 17:04:44 +0100

Hi,

According to http://optipng.sourceforge.net/

optipng released OptiPNG 0.6.2 fixing
"All current OptiPNG versions are known to be vulnerable to memory reallocation attacks, due to a bug in the GIF image 
reader. 

Please allocate a CVE ID.

Ciao, Marcus

Current thread:

CVE request: optipng security release Marcus Meissner (Feb 24)
- Re: CVE request: optipng security release Robert Buchholz (Feb 25)
  - Re: CVE request: optipng security release Steven M. Christey (Mar 02)