109 matches found
Solaris 10 (x86) : 137081-11 (deprecated)
SunOS 5.10x86: libpng Patch. Date this patch was last updated by Sun : Sep/11/17 This plugin has been deprecated and either replaced with individual 137081 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Solaris 10 (sparc) : 137080-11 (deprecated)
SunOS 5.10: libpng Patch. Date this patch was last updated by Sun : Sep/11/17 This plugin has been deprecated and either replaced with individual 137080 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...
SSA-2007-325-01a libpng for Slackware 10.1 and 10.2
New libpng packages are available for Slackware 10.1 and 10.2 that were left out of the last batch of updates. These fix the same security problems as the other 1.2.23 upgrades. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database:...
[slackware-security] libpng for Slackware 10.1 and 10.2
New libpng packages are available for Slackware 10.1 and 10.2 that were left out of the last batch of updates. These fix the same security problems as the other 1.2.23 upgrades. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database:...
[slackware-security] libpng
New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2007-5266...
Code injection
Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...
CVE-2007-5267
Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...
CVE-2007-5266
CVE-2007-5266 : Off-by-one error in ICC profile chunk handling (png_set_iCCP in pngset.c) of libpng. Affects libpng versions before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1. Root cause allows remote attacker to crash the program via a crafted PNG (name field not NULL terminated). Mitigation: up...