VYPR

Pngcrush Installer

by Pngcrush Installer Project

CVEs (1)

  • CVE-2016-10570HigMay 29, 2018
    risk 0.53cvss 8.1epss 0.02

    pngcrush-installer is an installer for Pngcrush. pngcrush-installer versions below 1.8.10 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an…