CVE-2004-0598

The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...

CVE-2004-0597

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which 1 the pnghandletRNS function does not properly validate the length of transparency chunk tRNS data, or the 2 pnghandlesBIT or 3...

CVE-2004-0597

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which 1 the pnghandletRNS function does not properly validate the length of transparency chunk tRNS data, or the 2 pnghandlesBIT or 3...

CVE-2004-0599

Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...

Debian DSA-570-1 : libpng - integer overflow

Several integer overflows have been discovered by its upstream developers in libpng, a commonly used library to display PNG graphics. They could be exploited to cause arbitrary code to be executed when a specially crafted PNG image is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Multiple libpng bugs

Stack overflow, NULL pointer dereference, integer overflows...

[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 570-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 570-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 570-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

DSA-570-1 libpng - integer overflow

Bulletin has no description...

DSA-571-1 libpng3 - buffer overflows, integer overflow

Bulletin has no description...

Debian DSA-536-1 : libpng - several vulnerabilities

Chris Evans discovered several vulnerabilities in libpng : - CAN-2004-0597 Multiple buffer overflows exist, including when handling transparency chunk data, which could be exploited to cause arbitrary code to be executed when a specially crafted PNG image is processed - CAN-2004-0598 Multiple NUL...

Debian DSA-213-1 : libpng - buffer overflow

Glenn Randers-Pehrson discovered a problem in connection with 16-bit samples from libpng, an interface for reading and writing PNG Portable Network Graphics format files. The starting offsets for the loops are calculated incorrectly which causes a buffer overrun beyond the beginning of the row...

Debian DSA-498-1 : libpng - out of bound access

Steve Grubb discovered a problem in the Portable Network Graphics library libpng which is utilised in several applications. When processing a broken PNG image, the error handling routine will access memory that is out of bounds when creating an error message. Depending on machine architecture,...

CVE-2002-1363

CVE-2002-1363 affects libpng 1.2.5 and earlier, where incorrect offset calculations in the PNG library can cause a remote crash and potentially arbitrary code execution via a buffer overflow in row buffers. The vulnerability is evidenced in multiple advisories (Red Hat RHSA, Debian DSA) and is re...

CVE-2002-1363

Portable Network Graphics PNG library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a buffer overflow attack on the row buffers...

GLSA-200408-03 : libpng: Numerous vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-03 libpng: Numerous vulnerabilities libpng contains numerous vulnerabilities including NULL pointer dereference errors and boundary errors in various functions. Impact : An attacker could exploit these vulnerabilities to...

GLSA-200405-06 : libpng denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-06 libpng denial of service vulnerability libpng provides two functions pngchunkerror and pngchunkwarning for default error and warning messages handling. These functions do not perform proper bounds checking on the provide...