3576 matches found
DSA-2410-1 libpng - integer overflow
Bulletin has no description...
Chrome Stable Update
The Chrome Stable channel has been updated to 17.0.963.56 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of stability and security issues in Chrome, and also includes a new version of Flash. More info on the Flash update is available from Adobe. Security fixes and rewards:...
Denial of service
The pnghandlecHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service divide-by-zero error and application crash via a malformed PNG image containing a cHRM chunk associated with a certain zero value...
CVE-2011-3328
The pnghandlecHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service divide-by-zero error and application crash via a malformed PNG image containing a cHRM chunk associated with a certain zero value...
CVE-2011-3328
The pnghandlecHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service divide-by-zero error and application crash via a malformed PNG image containing a cHRM chunk associated with a certain zero value...
EUVD-2011-3292
The pnghandlecHRM function in pngrutil.c in libpng 1.5.4, when color-correction support is enabled, allows remote attackers to cause a denial of service divide-by-zero error and application crash via a malformed PNG image containing a cHRM chunk associated with a certain zero value...
CVE-2011-3328
The CVE-2011-3328 issue affects libpng 1.5.4 with color-correction enabled, where png_handle_cHRM in pngrutil.c mishandles a cHRM chunk with a zero value, allowing a remote attacker to cause a denial of service (divide-by-zero and crash). Connected records confirm this vulnerability and indicate ...
CVE-2011-3048
The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...
SuSE 10 Security Update : libpng (ZYPP Patch Number 7670)
This update of libpng fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2692: CVSS v2 Base Score: 5.0 AV:N/AC:M/Au:N/C:N/I:N/A:P:...
Security fix for the ALT Linux 5 package libpng version 1.2.46-alt0.M50P.1
Dec. 5, 2011 Gleb Fotengauer-Malinovskiy 1.2.46-alt0.M50P.1 - Backport to p5 branch CVE-2011-2690 CVE-2011-2691 CVE-2011-2692...
Mandriva Update for libpng MDVSA-2011:151 (libpng)
Check for the Version of libpng OpenVAS Vulnerability Test Mandriva Update for libpng MDVSA-2011:151 libpng Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for libpng MDVSA-2011:151 (libpng)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Linux Security Advisory : libpng (MDVSA-2011:151)
Multiple vulnerabilities has been discovered and corrected in libpng : The pngformatbuffer function in pngerror.c in libpng allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data...
CentOS Update for libpng CESA-2011:1104 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for libpng CESA-2011:1104 centos5 i386
Check for the Version of libpng OpenVAS Vulnerability Test CentOS Update for libpng CESA-2011:1104 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CentOS 5 : libpng (CESA-2011:1104)
Updated libpng packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
libpng malformed cHRM divide-by-zero vulnerability
Overview libpng crashes when processing malformed cHRM chunks. Description When libpng encounters a cHRM chunk that is malformed it will perform a divide-by-zero causing libpng to crash. This bug was introduced in libpng version 1.5.4 and has been fixed in libpng version 1.5.5. --- Impact By...
VMSA-2010-0007 : VMware hosted products, vCenter Server and ESX patches resolve multiple security issues
a. Windows-based VMware Tools Unsafe Library Loading vulnerability A vulnerability in the way VMware libraries are referenced allows for arbitrary code execution in the context of the logged on user. This vulnerability is present only on Windows Guest Operating Systems. In order for an attacker t...
libpng security update
CentOS Errata and Security Advisory CESA-2011:1104 Updated libpng packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
CVE-2009-5063
Memory leak in the embeddedprofilelen function in pngwutil.c in libpng before 1.2.39beta5 allows context-dependent attackers to cause a denial of service memory leak or segmentation fault via a JPEG image containing an iCCP chunk with a negative embedded profile length. NOTE: this is due to an...