Security Bulletin: Several vulnerabilities in the libpng component of IBM Cognos Business Intelligence Server (CVE-2015-8126, CVE-2015-8472, CVE-2015-8540)

Summary

Several vulnerabilities has been addressed in the libpng component of IBM Cognos Business Intelligence Server.

Vulnerability Details

CVEID: CVE-2015-8126 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking by the png_set_PLTE() and png_get_PLTE() functions. By persuading a victim to open a specially-crafted PNG file, a remote attacker could overflow a buffer and execute arbitrary code on the system.
CVSS Base Score: 7.800
CVSS Temporal Score: <https://exchange.xforce.ibmcloud.com/vulnerabilities/108010&gt; for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

CVEID: CVE-2015-8472 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by improper bounds checking by the png_get_PLTE() and png_set_PLTE() functions. By persuading a victim to open a specially crafted PNG image, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVSS Base Score: 6.300
CVSS Temporal Score: <https://exchange.xforce.ibmcloud.com/vulnerabilities/109392&gt; for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)

CVEID: CVE-2015-8540 DESCRIPTION: libpng is vulnerable to a buffer overflow, caused by a read underflow in png_check_keyword in pngwutil.c. By sending an overly long argument, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVSS Base Score: 9.800
CVSS Temporal Score: <https://exchange.xforce.ibmcloud.com/vulnerabilities/109219&gt; for more information
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

• • IBM Cognos Business Intelligence Server 10.2.2
• IBM Cognos Business Intelligence Server 10.2.1.1
• IBM Cognos Business Intelligence Server 10.2.1
• IBM Cognos Business Intelligence Server 10.2
• IBM Cognos Business Intelligence Server 10.1.1
• IBM Cognos Business Intelligence Server 10.1

Remediation/Fixes

The recommended solution is to apply the fix for versions listed as soon as practical.

10.1.x: <http://www-01.ibm.com/support/docview.wss?uid=swg24041799&gt;
10.2.x: <http://www-01.ibm.com/support/docview.wss?uid=swg24041800&gt;

Workarounds and Mitigations

None known. Apply fixes.