NVD

Id
19712  
Name
CVE-2016-3981  
Description
Heap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-11-28  
Seq
2016-3981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107997 19712 CVE-2016-3981 http://bugs.fi/media/afl/optipng/1/  View
107998 19712 CVE-2016-3981 openSUSE-SU-2016:1078  View
107999 19712 CVE-2016-3981 openSUSE-SU-2016:1082  View
108000 19712 CVE-2016-3981 DSA-3546  View
108001 19712 CVE-2016-3981 USN-2951-1  View
108002 19712 CVE-2016-3981 CVE-2016-2191  View
108003 19712 CVE-2016-3981 DSA-3546-1  View
108004 19712 CVE-2016-3981 GLSA-201608-01  View
108005 19712 CVE-2016-3981 https://sourceforge.net/p/optipng/bugs/56/  View
108006 19712 CVE-2016-3981 CVE-2016-3981  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1362 JVNDB-2016-002135 OptiPNG の pngxrbmp.c の bmp_read_rows 関数におけるヒープベースのバッファオーバーフローの脆弱性 OptiPNG の pngxrbmp.c の bmp_read_rows 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-3981 90487 CVE-2016-3981 19712 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002135.html 2016-04-04 2016-04-21 View