CVE-2015-7801
Fixed in a distro release EPSS 5%
Use-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code via a crafted PNG file.
Products: optipng_project optipng, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | optipng | 0.7.5-1 |
| Debian 13 | optipng | 0.7.5-1 |
| Debian 14 | optipng | 0.7.5-1 |
| Debian 6.0 | optipng | 0.6.4-1+deb6u11 |
| Ubuntu 14.04 LTS | optipng | 0.6.4-1ubuntu0.14.04.1 |