CVE-2009-2294

Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values.

• dillo dillo (<= 2.1) • dillo dillo 0.0.0 • dillo dillo 0.0.1 • dillo dillo 0.0.2 • dillo dillo 0.0.3 • dillo dillo 0.0.4 • dillo dillo 0.0.5 • dillo dillo 0.0.6 • dillo dillo 0.0.42 • dillo dillo 0.0.43 • dillo dillo 0.1.0 • dillo dillo 0.2 • dillo dillo 0.2.1 • dillo dillo 0.2.2 • dillo dillo 0.2.3 • dillo dillo 0.2.4 • dillo dillo 0.3 • dillo dillo 0.3.1 • dillo dillo 0.3.2 • dillo dillo 0.4 • dillo dillo 0.5.0 • dillo dillo 0.5.1 • dillo dillo 0.6 • dillo dillo 0.6.1 • dillo dillo 0.6.2 • dillo dillo 0.6.3 • dillo dillo 0.6.4 • dillo dillo 0.6.5 • dillo dillo 0.6.6 • dillo dillo 0.7 • dillo dillo 0.7.1 • dillo dillo 0.7.1.2 • dillo dillo 0.7.2 • dillo dillo 0.7.3 • dillo dillo 0.8 • dillo dillo 0.8.1 • dillo dillo 0.8.2 • dillo dillo 0.8.3 • dillo dillo 0.8.4 • dillo dillo 0.8.5 • dillo dillo 0.8.6