CVE-2016-5735: Buffer Overflow
Published May 23, 2017
·Updated
Integer overflow in the rwpngreadimage24libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.
Affected Software
1 affected component
pngquant pngquant=2.7.0
Remediation
Event History
May 23, 2017
CVE Published
via MITRE·03:56 AM
Data Sourced
via MITRE·03:56 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-5735?
CVE-2016-5735 is considered to have a high severity due to its potential to cause a buffer overflow from a crafted PNG file.
2
How do I fix CVE-2016-5735?
To fix CVE-2016-5735, upgrade to a later version of pngquant that addresses the integer overflow and buffer overflow vulnerabilities.
3
What software is affected by CVE-2016-5735?
CVE-2016-5735 specifically affects pngquant version 2.7.0.
4
Can CVE-2016-5735 be exploited remotely?
Yes, CVE-2016-5735 can be exploited remotely through the use of a maliciously crafted PNG file.
5
What is the impact of CVE-2016-5735?
The impact of CVE-2016-5735 includes potential arbitrary code execution due to the buffer overflow.