Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-9210 →
DEBIAN-CVE-2019-9210
In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted me...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
advancecomp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-2"}]}]
Debian:13
advancecomp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-2"}]}]
Debian:14
advancecomp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1-2"}]}]
Références
- advisory security-tracker.debian.org