Arbitrary Code Execution

optipng is vulnerable to arbitrary code execution. A heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c remote attackers to execute arbitrary code on the host OS...