CVEs-PoC/2017/CVE-2017-15601.md

CVE-2017-15601

Description

In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.

POC

Reference

• http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00006.html
• http://lists.gnu.org/archive/html/bug-libextractor/2017-10/msg00006.html

Github

No PoCs found on GitHub currently.