USN-5671-1

Dashboard / Vulnerabilities / USN-5671-1

USN-5671-1

Summary: advancecomp vulnerabilities

Details: It was discovered that AdvanceCOMP did not properly manage memory of function be_uint32_read() under certain circumstances. If a user were tricked into opening a specially crafted binary file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2019-8379) It was discovered that AdvanceCOMP did not properly manage memory of function adv_png_unfilter_8() under certain circumstances. If a user were tricked into opening a specially crafted PNG file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2019-8383)

References: https://ubuntu.com/security/notices/USN-5671-1, https://ubuntu.com/security/CVE-2019-8379, https://ubuntu.com/security/CVE-2019-8383