[SECURITY] Fedora 13 Update: libpng-1.2.43-1.fc13

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

libpng DoS

Resources exhaustion on data decompression in pngdecompresschunk...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : libpng vulnerabilities (USN-913-1)

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only...

USN-913-1: libpng vulnerabilities

It was discovered that libpng did not properly initialize memory when decoding certain 1-bit interlaced images. If a user or automated system were tricked into processing crafted PNG images, an attacker could possibly use this flaw to read sensitive information stored in memory. This issue only...

Security fix for the ALT Linux 5 package libpng version 1.2.43-alt1

March 9, 2010 Dmitry V. Levin 1.2.43-alt1 - Updated to 1.2.43 fixes CVE-2010-0205...

Security fix for the ALT Linux 6 package libpng version 1.2.43-alt1

March 9, 2010 Dmitry V. Levin 1.2.43-alt1 - Updated to 1.2.43 fixes CVE-2010-0205...

CVE-2010-0205

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

CVE-2010-0205

CVE-2010-0205 concerns libpng’s png_decompress_chunk() in libpng 1.0.x (before 1.0.53), 1.2.x (before 1.2.43), and 1.4.x (before 1.4.1). The vulnerability arises from improper handling of compressed ancillary-chunk data with an excessively large uncompressed representation, enabling a crafted PNG...

CVE-2010-0205

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

CVE-2010-0205

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

libpng stalls on highly compressed ancillary chunks

Overview Libpng stalls and consumes large quantities of memory while processing certain Portable Network Graphics PNG files. Description When processing PNG files containing highly compressed ancillary chunks, the pngdecompresschunk function in libpng can consume large amounts of CPU time and...

png -- libpng decompression denial of service

A vulnerability in libpng can result in denial of service conditions when a remote attacker tricks a victim to open a specially-crafted PNG file. The PNG project describes the problem in an advisory: Because of the efficient compression method used in Portable Network Graphics PNG files, a small...

libpng Transparency Chunk Length Buffer Overflow (CVE-2004-0597)

The Portable Network Graphics PNG specification defines a datastream and an associated file format that provides a lossless, portable, image compression. libpng is a open source implementation of the PNG specification. A vulnerability exists in the way libpng handles the transparency chunk of a P...

CentOS 4 : libpng (CESA-2009:0333)

Updated libpng and libpng10 packages that fix a couple of security issues are now available for Red Hat Enterprise Linux 2.1, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng packages contain a library of functions for...

Apple CUPS PNG Filter Overly Large Image Height Integer Overflow (CVE-2008-5286)

The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print jobs from client computers, process them, and send them to the appropriate printer. There exis...

SLES10: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng libpng-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng libpng-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng libpng-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng libpng-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng libpng-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...