2 matches found
UBUNTU-CVE-2015-7700
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors...
Internet Bug Bounty: pngcrush double-free/segfault could result in DoS (CVE-2015-7700)
All versions of pngcrush pmt.sourceforge.net/pngcrush prior to version 1.7.87 have a double-free segfault that can be triggered by reading a valid PNG file that contains the sPLT chunk. This bug has been fixed in 1.7.87 by the project maintainer. Persuading someone to run pngcrush with a valid PN...