CVE-2015-7700 Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pngcrush(Debian:12) | < 1.8.13-0.1 | 1.8.13-0.1 |
| debian/pngcrush(Debian:13) | < 1.8.13-0.1 | 1.8.13-0.1 |
| debian/pngcrush(Debian:14) | < 1.8.13-0.1 | 1.8.13-0.1 |
| pngcrush project pngcrush | <= 1.7.86 | No fix listed |
References
- Debian Security Tracker CVE-2015-7700 vendor-advisory
- pmt.sourceforge.net broken-link
- sourceforge.net release-notes
- bugs.debian.org issue-tracking