Skip to content

CVE-2017-6191 Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.

HighCVSS 7.8 EPSS 6.7%
Published
Updated
Exploit status
No public exploit known

Description

Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.

Affected products

ProductAffected versionsFixed in
apng disassembler project apng disassembler <= 2.8 No fix listed

References

  • 97053 third-party-advisory vdb-entry
  • 41670 exploit third-party-advisory vdb-entry
  • www.onvio.nl exploit third-party-advisory