CVE-2015-7801: Use After Free
Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file.
Other sources
Use-after-free vulnerability in optipng 0.6.4 causing an invalid/double free was found.
CVE request (containing valgrind report):
http://seclists.org/oss-sec/2015/q3/556
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7801?
CVE-2015-7801 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2015-7801?
To fix CVE-2015-7801, upgrade OptiPNG to version 0.6.5 or later, which addresses this vulnerability.
What systems are affected by CVE-2015-7801?
CVE-2015-7801 affects OptiPNG version 0.6.4 and specific versions of Ubuntu Linux including 12.04, 14.04, and 15.10.
What type of vulnerability is CVE-2015-7801?
CVE-2015-7801 is a use-after-free vulnerability that can lead to arbitrary code execution.
Who can exploit CVE-2015-7801?
Remote attackers can exploit CVE-2015-7801 by sending a specially crafted PNG file to the vulnerable system.