CVE:CVE-2009-0749
CNNVD:CNNVD-200903-047
OptiPNG是一套用于图片无损压缩的工具。
OptiPNG的lib/pngxtern/gif/gifread.c文件中的GIFReadNextExtension()函数存在释放后使用错误，如果用户受骗打开了特制的GIF图形就会导致拒绝服务或执行任意代码。
solution:Upgrade cosmin_truta optipng to a higher version than 0.6.2,0.0,0.1,0.2,0.3,0.3.1,0.3.2,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6,0.6.1,and avoid the version (,0.6.2],0.0,0.1,0.2,0.3,0.3.1,0.3.2,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6,0.6.1