A vulnerability has been reported in Ziproxy, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error within the processing of certain PNG images, which can be exploited to cause a heap-based buffer overflow by e.g. tricking a user into loading specially crafted PNG images via Ziproxy.

The vulnerability is reported in version 3.1.0.

Solution
Update to version 3.1.1.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://ziproxy.sourceforge.net/
http://ziproxy.cvs.sourceforge.net/viewvc/ziproxy/ziproxy-default/ChangeLog?r1=1.241&r2=1.239

Deep Links
Links available to Secunia VIM customers