Bug 335576

Summary:	media-gfx/swftools: Multiple integer overflows (CVE-2010-1516)
Product:	Gentoo Security	Reporter:	Stefan Behte (RETIRED) <craig>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	vanquirius
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B2 [ebuild]
Package list:		Runtime testing required:	---

Description Stefan Behte (RETIRED) gentoo-dev

2010-09-01 19:42:18 UTC

CVE-2010-1516 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1516):
  Multiple integer overflows in SWFTools 0.9.1 allow remote attackers
  to execute arbitrary code via (1) a crafted PNG file, related to the
  getPNG function in lib/png.c; or (2) a crafted JPEG file, related to
  the jpeg_load function in lib/jpeg.c.

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2010-09-01 19:44:03 UTC

Whoops.

*** This bug has been marked as a duplicate of bug 332649 ***