libpng png_handle_sBIT() performs insufficient bounds checking

Overview The Portable Network Graphics library libpng contains a flaw that could introduce a remotely exploitable vulnerability. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics Interchange Format GIF. The libpng...

Mandrake Linux Security Advisory : libpng (MDKSA-2004:063)

A buffer overflow vulnerability was discovered in libpng due to a wrong calculation of some loop offset values. This buffer overflow can lead to Denial of Service or even remote compromise. This vulnerability was initially patched in January of 2003, but it has since been noted that fixes were...

Mandrake Linux Security Advisory : libpng (MDKSA-2004:040)

Steve Grubb discovered that libpng would access memory that is out of bounds when creating an error message. The impact of this bug is not clear, but it could lead to a core dump in a program using libpng, or could result in a DoS Denial of Service condition in a daemon that uses libpng to proces...

Mandrake Linux Security Advisory : libpng (MDKSA-2003:008)

A buffer overflow vulnerability was discovered in libpng due to a wrong calculation of some loop offset values. This buffer overflow can lead to Denial of Service or even remote compromise. After the upgrade, all applications that use libpng should be restarted. Many applications are linked to...

SUSE-SA:2003:0004: libpng

The remote host is missing the patch for the advisory SUSE-SA:2003:0004 libpng. The library libpng provides several functions to encode, decode and manipulate Portable Network Graphics PNG image files. Due to wrong calculation of some loop offset values a buffer overflow can occur. The buffer...

Fedora Core 1 : libpng10-1.0.13-11 (2004-106)

Mon Apr 19 2004 Matthias Clasen - fix a possible out-of-bounds read in the error message handler. 121229 - Tue Mar 02 2004 Elliot Lee - rebuilt - Fri Feb 13 2004 Elliot Lee - rebuilt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora Core 2 : libpng10-1.0.15-5 (2004-176)

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...

Fedora Core 1 : libpng10-1.0.15-4 (2004-174)

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...

Fedora Core 2 : libpng-1.2.5-5 (2004-175)

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...

Fedora Core 1 : libpng-1.2.2-20 (2004-105)

Mon Apr 19 2004 Matthias Clasen - fix a possible out-of-bounds read in the error message handler. 121229 - Tue Mar 02 2004 Elliot Lee - rebuilt - Fri Feb 27 2004 Mark McLoughlin 2:1.2.2-19 - rebuild with changed bits/setjmp.h on ppc - Fri Feb 13 2004 Elliot Lee - rebuilt Note that Tenable Network...

Fedora Core 1 : libpng-1.2.5-4 (2004-173)

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...

libpng: Buffer overflow on row buffers

Background libpng is a standard library used to process PNG Portable Network Graphics images. It is used by several other programs, including web browsers and potentially server processes. Description Due to a wrong calculation of loop offset values, libpng contains a buffer overflow vulnerabilit...

RHEL 2.1 / 3 : libpng (RHSA-2004:180)

Updated libpng packages that fix a out of bounds memory access are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. Steve Grubb discovered a out of bounds memory access flaw in libpng. An attacker cou...

FreeBSD : libpng denial-of-service (93)

The following package needs to be updated: linux-png %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3a408f6f9c5211d893660020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : libpng (RHSA-2003:007)

Updated libpng packages are available which fix a buffer overflow vulnerability. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a...

RHEL 2.1 : libpng (RHSA-2002:152)

Updated libpng packages are available that fix a buffer overflow vulnerability. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. Versions of libpng prio...

RHEL 3 : libpng (RHSA-2004:249)

Updated libpng packages that fix a possible buffer overflow are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue...

[Full-Disclosure] MDKSA-2004:063 - Updated libpng packages fix potential remote compromise

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: libpng Advisory ID: MDKSA-2004:063 Date: June 29th, 2004 Affected versions: 10.0, 9.1, 9.2, Corporate Server 2.1, Multi Network Firewall 8.2 Problem Description: A buffer overflow vulnerability was...

Important: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix a possible buffer overflow are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue...

Important: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix a out of bounds memory access are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. Steve Grubb discovered a out of bounds memory access flaw in libpng. An attacker cou...