gifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial of service (uninitialized memory read) via a crafted GIF file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Buffer Overflow
Denial Of Service
Canonical
Ubuntu Linux
Optipng
+1
NVD
CVSS 3.0
5.5
EPSS
0.4%
The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite (ITMS) through 7.6 HF7 allows local users to bypass intended application-blacklist. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Privilege Escalation
Symantec
Altiris It Management Suite
NVD
CVSS 3.0
5.5
EPSS
0.1%