CVE-2010-1513

Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows.

• daniel mealha cabrita ziproxy (<= 3.0.0) • daniel mealha cabrita ziproxy 1.1 • daniel mealha cabrita ziproxy 1.2 • daniel mealha cabrita ziproxy 1.3 • daniel mealha cabrita ziproxy 1.4.0 • daniel mealha cabrita ziproxy 1.5.0 • daniel mealha cabrita ziproxy 1.5.1 • daniel mealha cabrita ziproxy 1.5.2 • daniel mealha cabrita ziproxy 1.9.0 • daniel mealha cabrita ziproxy 2.0.0 • daniel mealha cabrita ziproxy 2.1.0 • daniel mealha cabrita ziproxy 2.1.1 • daniel mealha cabrita ziproxy 2.2.0 • daniel mealha cabrita ziproxy 2.2.1 • daniel mealha cabrita ziproxy 2.2.2 • daniel mealha cabrita ziproxy 2.3.0 • daniel mealha cabrita ziproxy 2.3.5 • daniel mealha cabrita ziproxy 2.4.0 • daniel mealha cabrita ziproxy 2.4.1 • daniel mealha cabrita ziproxy 2.4.2 • daniel mealha cabrita ziproxy 2.4.3 • daniel mealha cabrita ziproxy 2.4.8 • daniel mealha cabrita ziproxy 2.5.0 • daniel mealha cabrita ziproxy 2.5.1 • daniel mealha cabrita ziproxy 2.5.2 • daniel mealha cabrita ziproxy 2.5.9 • daniel mealha cabrita ziproxy 2.6.0 • daniel mealha cabrita ziproxy 2.6.9 • daniel mealha cabrita ziproxy 2.7.0 • daniel mealha cabrita ziproxy 2.7.1 • daniel mealha cabrita ziproxy 2.7.2 • daniel mealha cabrita ziproxy 2.7.9 • daniel mealha cabrita ziproxy 3.0.1