CVE-2010-1513 Integer overflow in n/a
Remote attackers can execute arbitrary code by sending large JPG or PNG images to Ziproxy, exploiting integer overflows leading to heap buffer overflows.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-1513?
CVE-2010-1513 is a medium-severity vulnerability in n/a, published on 26 May 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple integer overflows in src/image.c in Ziproxy before 3.0.1 allow remote attackers to execute arbitrary code via (1) a large JPG image, related to the jpg2bitmap function or (2) a large PNG image, related to the png2bitmap function, leading to heap-based buffer overflows.
Weakness: CWE-189
Which versions are affected by CVE-2010-1513?
It affects 1 product.
Products include Daniel Mealha Cabrita Ziproxy.
How do I fix CVE-2010-1513?
Upgrade to a fixed version.
Is CVE-2010-1513 being exploited?
There is no known exploitation of CVE-2010-1513 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2010-1513, GHSA-8fr7-79w9-7h79.