Lucene search

K
freebsdFreeBSD4CB9C513-03EF-11DC-A51D-0019B95D4F14
HistoryMay 15, 2007 - 12:00 a.m.

png -- DoS crash vulnerability

2007-05-1500:00:00
vuxml.freebsd.org
21

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.839 High

EPSS

Percentile

98.4%

A Libpng Security Advisory reports:

A grayscale PNG image with a malformed (bad CRC) tRNS
chunk will crash some libpng applications.
This vulnerability could be used to crash a browser when
a user tries to view such a malformed PNG file. It is not
known whether the vulnerability could be exploited
otherwise.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpng< 1.2.17UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.839 High

EPSS

Percentile

98.4%