Vulnerability in Daniel Mealha Cabrita Ziproxy

CVE-2010-1513

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows.

EPSS: 0.033 (87.2th percentile) — read the EPSS interpretation.

Affected products

Daniel_mealha_cabrita Ziproxy — versions 2.7.1, 2.5.1, 2.4.3
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)