Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, related to an "array overflow."

Specially crafted BMP files could overflow a buffer in optipng (CVE-2008-5101), specially crafted GIF files could crash optipng (CVE-2009-0749).

Secunia reports :

A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into processing a specially crafted file.

Successful exploitation may allow execution of arbitrary code.

The remote host is affected by the vulnerability described in GLSA-200812-01 (OptiPNG: User-assisted execution of arbitrary code)

    A buffer overflow in the BMP reader in OptiPNG has been reported.
  Impact :

    A remote attacker could entice a user to process a specially crafted     BMP image, possibly resulting in the execution of arbitrary code with     the privileges of the user running the application, or a Denial of     Service.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
40291	openSUSE Security Update : optipng (optipng-572)	Nessus	SuSE Local Security Checks	high
40096	openSUSE Security Update : optipng (optipng-572)	Nessus	SuSE Local Security Checks	high
35784	openSUSE 10 Security Update : optipng (optipng-6038)	Nessus	SuSE Local Security Checks	high
35426	FreeBSD : optipng -- arbitrary code execution via crafted BMP image (2bc960c4-e665-11dd-afcd-00e0815b8da8)	Nessus	FreeBSD Local Security Checks	high
35018	GLSA-200812-01 : OptiPNG: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2008-5101

high

Tenable Plugins

high

high

high

high

high