CVE-2015-0852
Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- freeimage_project:freeimage
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172491.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172583.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168000.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168023.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167766.html