EUVD-2009-4220

Malware in sbrugna...

Stack overflow

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 aka Corel Paint Shop Pro allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366...

CVE-2007-2366

CVE-2007-2366 describes a buffer overflow in Corel Paint Shop Pro 11.20 during PNG parsing, allowing user‑assisted remote code execution via a crafted PNG file. The underlying cause is a vulnerability in the PNG processing path that overflows a buffer when handling crafted inputs. The description...