Gentoo: GLSA-200603-18 Moderate: Pngcrush Buffer Overflow Threat

Gentoo Linux Security Advisory GLSA 200603-18 https://security.gentoo.org/ Severity: Normal Title: Pngcrush: Buffer overflow Date: March 21, 2006 Bugs: #123286 ID: 200603-18

Synopsis ======= Pngcrush is vulnerable to a buffer overflow which could potentially lead to the execution of arbitrary code.
Background ========= Pngcrush is an optimizer for PNG files.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/pngcrush < 1.6.2 >= 1.6.2
========== Carsten Lohrke of Gentoo Linux reported that Pngcrush contains a vulnerable version of zlib (GLSA 200507-19).
Impact ===== By creating a specially crafted data stream, attackers can overwrite data stru...