CVE-2009-0749 Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (applicatio...
HighCVSS 7.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a crafted GIF image that causes the realloc function to return a new pointer, which triggers memory corruption when the old pointer is accessed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| optipng project optipng | <= 0.6.2 | No fix listed |
| opensuse | >= 10.3, <= 11.1 | No fix listed |
| SUSE linux enterprise | = 9-11 | No fix listed |
| debian/optipng(Debian:12) | < 0.6.2.1-1 | 0.6.2.1-1 |
| debian/optipng(Debian:13) | < 0.6.2.1-1 | 0.6.2.1-1 |
| debian/optipng(Debian:14) | < 0.6.2.1-1 | 0.6.2.1-1 |
References
- SUSE-SR:2009:006 mailing-list vendor-advisory
- SUSE-SR:2009:012 mailing-list vendor-advisory
- optipng.sourceforge.net product
- 34035 broken-link third-party-advisory vendor-advisory
- 34201 broken-link third-party-advisory
- 34259 broken-link third-party-advisory
- 35685 broken-link third-party-advisory
- sourceforge.net issue-tracking
- GLSA-200903-12 third-party-advisory vendor-advisory
- [oss-security] 20090224 CVE request: optipng security release mailing-list
- [oss-security] 20090225 Re: CVE request: optipng security release mailing-list
- 33873 broken-link patch third-party-advisory vdb-entry
- ADV-2009-0510 broken-link patch vdb-entry vendor-advisory
- optipng-gifreadnextextension-code-execution(48879) third-party-advisory vdb-entry
- Debian Security Tracker CVE-2009-0749 vendor-advisory