CVEs-PoC/2015/CVE-2015-0852.md

CVE-2015-0852

Description

Multiple integer underflows in PluginPCX.cpp in FreeImage 3.17.0 and earlier allow remote attackers to cause a denial of service (heap memory corruption) via vectors related to the height and width of a window.

POC

Reference

• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Github

• https://github.com/andir/nixos-issue-db-example