335576 – media-gfx/swftools: Multiple integer overflows (CVE-2010-1516)

Bug 335576 - media-gfx/swftools: Multiple integer overflows (CVE-2010-1516)

Summary: media-gfx/swftools: Multiple integer overflows (CVE-2010-1516)

Status:	RESOLVED DUPLICATE of bug 332649

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	B2 [ebuild]
Keywords:

Depends on:
Blocks:

Reported:	2010-09-01 19:42 UTC by Stefan Behte (RETIRED)
Modified:	2010-09-01 19:44 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stefan Behte (RETIRED) gentoo-dev

2010-09-01 19:42:18 UTC

CVE-2010-1516 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-1516):
  Multiple integer overflows in SWFTools 0.9.1 allow remote attackers
  to execute arbitrary code via (1) a crafted PNG file, related to the
  getPNG function in lib/png.c; or (2) a crafted JPEG file, related to
  the jpeg_load function in lib/jpeg.c.

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2010-09-01 19:44:03 UTC

Whoops.

*** This bug has been marked as a duplicate of bug 332649 ***