Mandrake Linux Security Advisory : libpng (MDKSA-2007:116)

A flaw how libpng handled malformed images was discovered. An attacker able to create a carefully crafted PNG image could cause an application linked with libpng to crash when the file was manipulated. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...

GLSA-200705-24 : libpng: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200705-24 libpng: Denial of Service Mats Palmgren fixed an error in file pngrutil.c in which the trans array might be not allocated because of images with a bad tRNS chunk CRC value. Impact : A remote attacker could craft an image...

libpng: Denial of service

Background libpng is a free ANSI C library used to process and manipulate PNG images. Description Mats Palmgren fixed an error in file pngrutil.c in which the trans array might be not allocated because of images with a bad tRNS chunk CRC value. Impact A remote attacker could craft an image that...

Fedora Core 5 : libpng-1.2.8-3.fc5 (2007-528)

Wed May 23 2007 Tom Lane 2:1.2.8-3 - Add patch to fix CVE-2006-5793 Related: 215405 - Add patch to fix CVE-2007-2445 Related: 239542 - Require pkgconfig in the -devel subpackage Resolves: 217903 Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora Core 6 : libpng-1.2.10-9.fc6 (2007-529)

Wed May 23 2007 Tom Lane 2:1.2.10-9 - Add patch to fix CVE-2006-5793 Related: 215405 - Add patch to fix CVE-2007-2445 Related: 239542 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

[SECURITY] Fedora Core 6 Update: libpng-1.2.10-9.fc6

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

[SECURITY] Fedora Core 5 Update: libpng-1.2.8-3.fc5

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

libpng security update

CentOS Errata and Security Advisory CESA-2007:356 Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of function...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 / current : libpng (SSA:2007-136-01)

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-136-01. The...

RHEL 2.1 / 3 / 4 / 5 : libpng (RHSA-2007:0356)

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

FreeBSD : png -- DoS crash vulnerability (4cb9c513-03ef-11dc-a51d-0019b95d4f14)

A Libpng Security Advisory reports : A grayscale PNG image with a malformed bad CRC tRNS chunk will crash some libpng applications. This vulnerability could be used to crash a browser when a user tries to view such a malformed PNG file. It is not known whether the vulnerability could be exploited...

CentOS 3 / 4 / 5 : libpng (CESA-2007:0356)

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

Code injection

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The CVE-2007-2756 issue affects the GD library (libgd) with version 2.0.34, where gdPngReadData can enter an infinite loop in png_read_info when processing a crafted PNG with truncated data. This leads to CPU exhaustion (DoS) and is described as user-assisted. Demonstrated vulnerability context c...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

libpng, libpng10 security update

CentOS Errata and Security Advisory CESA-2007:0356 Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functio...

libpng security update

CentOS Errata and Security Advisory CESA-2007:0356-01 Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of...