CVE-2012-4432

Exploit

EPSS 3.64%
Published 01.10.2012 03:26:16
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

Use-after-free vulnerability in opngreduc.c in OptiPNG Hg and 0.7.x before 0.7.3 might allow remote attackers to execute arbitrary code via unspecified vectors related to "palette reduction."

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Optipng ≫ Optipng Version0.7.0

Optipng ≫ Optipng Version0.7.1

Optipng ≫ Optipng Version0.7.2

Optipng ≫ Optipng Versionhg

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.64%	0.867

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://optipng.sourceforge.net/

Patch

Vendor Advisory

http://optipng.hg.sourceforge.net/hgweb/optipng/optipng/rev/f1d5d44670a2

Exploit

http://secunia.com/advisories/50654

Vendor Advisory

http://sourceforge.net/news/?group_id=151404

http://www.openwall.com/lists/oss-security/2012/09/17/5

Patch

Exploit

http://www.openwall.com/lists/oss-security/2012/09/18/2

Patch

Exploit

http://www.securityfocus.com/bid/55566

https://exchange.xforce.ibmcloud.com/vulnerabilities/78743

https://nvd.nist.gov/vuln/detail/CVE-2012-4432

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4432

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4432

EUVD