Vulnerabilities

TI-2010-02256 CVE-2010-2350 · GHSA-vr3x-5p25-4vw9

Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to…

LOW 36

Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03297 Published 2010-06-21 No fix listed CWE-119

TI-2010-01462 CVE-2010-1513 · GHSA-8fr7-79w9-7h79

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers…

LOW 36

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the pn…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03297 Published 2010-05-26 No fix listed CWE-189

Vulnerabilities

Filters

Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to…

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers…