CVE-2013-6954

Summary of findings (CVE-2013-6954): The vulnerability exists in the libpng project where the function png_do_expand_palette in versions before 1.6.8 can be triggered by a crafted PNG image, specifically a PLTE chunk of zero bytes or a NULL palette, causing a NULL pointer dereference and applicat...

CVE-2013-6954

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

PT-2014-1614 · Libpng +5 · Libpng +5

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.6.8 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This can be achieved via a PLTE chunk of zero bytes or a NULL palette,...

libpng 1.6.1 through 1.6.7 contain a null-pointer dereference vulnerability

Overview libpng versions 1.6.1 through 1.6.7 fail to reject colormapped images with empty palettes, leading to a null-pointer dereference crash in pngdoexpandpalette. Description The PNG Development Group has reported that "libpng versions 1.6.1 through 1.6.7 fail to reject colormapped images wit...

ESXi 5.1 < Build 911593 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.1 host is affected by the following security vulnerabilities : - An input validation error exists in the function 'pngsettext2' in the libpng library that could allow memory corruption and arbitrary code execution. CVE-2011-3048 - A privilege escalation vulnerability exis...

Debian Security Advisory DSA 2439-1 (libpng - buffer overflow)

Glenn-Randers Pehrson discovered an buffer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb24391.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2439-1 using...

Debian: Security Advisory (DSA-2439-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : libpng (ALAS-2012-56)

A heap-based buffer overflow flaw was found in the way libpng processed compressed chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of...

Amazon Linux AMI : libpng (ALAS-2012-49)

A heap-based buffer overflow flaw was found in libpng. An attacker could create a specially crafted PNG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application. CVE-2011-3026 C Tenable...

Amazon Linux AMI : libpng (ALAS-2012-68)

A heap-based buffer overflow flaw was found in the way libpng processed tEXt chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the...

Oracle Linux 5 / 6 : libpng (ELSA-2012-0407)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0407 advisory. 2:1.2.48-1 - Update to libpng 1.2.48, for minor security issues CVE-2011-3045 Resolves: 801663 Tenable has extracted the preceding description block directl...

Oracle Linux 5 : Moderate: / libpng (ELSA-2007-0356)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0356 advisory. libpng-1.2.7-3.el4: 1.2.7-3.el4 - Add patch to fix CVE-2006-5793 Resolves: 215405 1.2.7-2.el4 - Add patch to fix CVE-2007-2445 Resolves: 239543...

Oracle Linux 3 : libpng (ELSA-2009-0340)

From Red Hat Security Advisory 2009:0340 : Updated libpng and libpng10 packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng packages contain a library of...

Oracle Linux 5 : libpng (ELSA-2010-0534)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0534 advisory. 2:1.2.10-7.1.el55.3 - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205, CVE-2010-2249 Resolves: 609921 Tenable has extracted the precedi...

Oracle Linux 4 : libpng (ELSA-2011-1103)

From Red Hat Security Advisory 2011:1103 : Updated libpng and libpng10 packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS bas...

Oracle Linux 5 / 6 : libpng (ELSA-2012-0317)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0317 advisory. 2:1.2.46-2 - Fix CVE-2011-3026 Resolves: 791007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 5 / 6 : libpng (ELSA-2012-0523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0523 advisory. 2:1.2.49-1 - Update to libpng 1.2.49, for minor security issues CVE-2011-3048 Resolves: 812714 Tenable has extracted the preceding description block directl...

Oracle Linux 5 : Moderate: / libpng (ELSA-2007-0992)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0992 advisory. 1.2.7-3.el45.1 - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269 Resolves: 337501 - Update License tag and some other obsolete bits ...

Oracle Linux 5 : libpng (ELSA-2009-0333)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0333 advisory. 1.2.10-7.1.el53.2 - Back-port fixes for CVE-2008-1382 and CVE-2009-0040. Resolves: 487168 Tenable has extracted the preceding description block directl...

Oracle Linux 6 : libpng (ELSA-2011-1105)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1105 advisory. 2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: 721305 Tenable has...