Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.

The remote host is affected by the vulnerability described in GLSA-201701-68 (FreeImage: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in in FreeImage. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted       image file, could possibly execute arbitrary code with the privileges of       the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Update to version 3.17.0, see http://freeimage.sourceforge.net/news.html for details. This update also includes a patch for CVE-2015-0852.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes CVE-2015-0852.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Pcheng pcheng reports :

An integer overflow issue in the FreeImage project was reported and fixed recently.

Pengsu Cheng discovered that FreeImage, a library for graphic image formats, contained multiple integer underflows that could lead to a denial of service: remote attackers were able to trigger a crash by supplying a specially crafted image.

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update resolves CVE-2015-0852.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to version 3.17.0, see http://freeimage.sourceforge.net/news.html for details. This update includes a patch for CVE-2015-0852.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
96854	GLSA-201701-68 : FreeImage: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
89438	Fedora 23 : mingw-freeimage-3.17.0-1.fc23 (2015-decbab7c9f)	Nessus	Fedora Local Security Checks	medium
89334	Fedora 22 : mingw-freeimage-3.15.4-6.fc22 (2015-992342e82f)	Nessus	Fedora Local Security Checks	medium
87361	FreeBSD : freeimage -- multiple integer overflows (33459061-a1d6-11e5-8794-bcaec565249c)	Nessus	FreeBSD Local Security Checks	medium
86727	Debian DSA-3392-1 : freeimage - security update	Nessus	Debian Local Security Checks	medium
86428	Debian DLA-327-1 : freeimage security update	Nessus	Debian Local Security Checks	medium
86237	Fedora 22 : freeimage-3.10.0-23.fc22 (2015-16105)	Nessus	Fedora Local Security Checks	medium
86236	Fedora 21 : freeimage-3.10.0-23.fc21 (2015-16104)	Nessus	Fedora Local Security Checks	medium
86173	Fedora 23 : freeimage-3.17.0-1.fc23 (2015-16106)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2015-0852

high

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

medium

medium