28
edits
Changes
Jump to navigation
Jump to search
→Pixel Paint
Line 97:
Line 97:
| November 14, 2016
| November 14, 2016
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
+|-
+| Pixel Paint
+| Buffer overflow via unchecked extdata file length
+| Pixel Paint loads pictures saved by the user from extdatas. The file is read to a fixed size buffer but the file length remains unchecked, so with a large enough file, one can overwrite pointers in memory and gain control of the execution flow.
+| None
+| App: Initial version. System: [[11.2.0-35]].
+| December 27, 2016
+| November 5, 2016
+| [[User:Nba_Yoh|MrNbaYoh]]
|}
|}