28
edits
Changes
Jump to navigation
Jump to search
Line 97:
Line 97: + + + + + + + + +
→Pixel Paint
| November 14, 2016
| November 14, 2016
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
|-
| Pixel Paint
| Buffer overflow via unchecked extdata file length
| Pixel Paint loads pictures saved by the user from extdatas. The file is read to a fixed size buffer but the file length remains unchecked, so with a large enough file, one can overwrite pointers in memory and gain control of the execution flow.
| None
| App: Initial version. System: [[11.2.0-35]].
| December 27, 2016
| November 5, 2016
| [[User:Nba_Yoh|MrNbaYoh]]
|}
|}