CVE

Id
38184  
CVE No.
CVE-2009-0749  
Status
Candidate  
Description
Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the realloc function to return a new pointer, which triggers memory corruption when the old pointer is accessed.  
Phase
Assigned (20090302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
415456 38184 CVE-2009-0749 MLIST:[oss-security] 20090224 CVE request: optipng security release  View
415457 38184 CVE-2009-0749 URL:http://www.openwall.com/lists/oss-security/2009/02/24/2  View
415458 38184 CVE-2009-0749 MLIST:[oss-security] 20090225 Re: CVE request: optipng security release  View
415459 38184 CVE-2009-0749 URL:http://www.openwall.com/lists/oss-security/2009/02/25/4  View
415460 38184 CVE-2009-0749 CONFIRM:http://optipng.sourceforge.net  View
415461 38184 CVE-2009-0749 CONFIRM:http://sourceforge.net/tracker/index.php?func=detail&aid=2582013&group_id=151404&atid=780913  View
415462 38184 CVE-2009-0749 GENTOO:GLSA-200903-12  View
415463 38184 CVE-2009-0749 URL:http://www.gentoo.org/security/en/glsa/glsa-200903-12.xml  View
415464 38184 CVE-2009-0749 SUSE:SUSE-SR:2009:006  View
415465 38184 CVE-2009-0749 URL:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html  View
415466 38184 CVE-2009-0749 SUSE:SUSE-SR:2009:012  View
415467 38184 CVE-2009-0749 URL:http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html  View
415468 38184 CVE-2009-0749 BID:33873  View
415469 38184 CVE-2009-0749 URL:http://www.securityfocus.com/bid/33873  View
415470 38184 CVE-2009-0749 SECUNIA:34035  View
415471 38184 CVE-2009-0749 URL:http://secunia.com/advisories/34035  View
415472 38184 CVE-2009-0749 SECUNIA:34201  View
415473 38184 CVE-2009-0749 URL:http://secunia.com/advisories/34201  View
415474 38184 CVE-2009-0749 SECUNIA:34259  View
415475 38184 CVE-2009-0749 URL:http://secunia.com/advisories/34259  View
415476 38184 CVE-2009-0749 SECUNIA:35685  View
415477 38184 CVE-2009-0749 URL:http://secunia.com/advisories/35685  View
415478 38184 CVE-2009-0749 VUPEN:ADV-2009-0510  View
415479 38184 CVE-2009-0749 URL:http://www.vupen.com/english/advisories/2009/0510  View
415480 38184 CVE-2009-0749 XF:optipng-gifreadnextextension-code-execution(48879)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43496 JVNDB-2009-004503 MLDonkey における絶対パストラバーサルの脆弱性 MLDonkey には、絶対パストラバーサルの脆弱性が存在します。 CVE-2009-0753 38184 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004503.html  View