Updated libpng packages fix CVE-2014-9495

Updated libpng packages fix security vulnerability: libpng versions 1.6.9 through 1.6.15 have an integer-overflow vulnerability in pngcombinerow when decoding very wide interlaced images, which can allow an attacker to overwrite an arbitrary amount of memory with arbitrary attacker-controlled dat...

libpng 'png_combine_row()' buffer overflow vulnerability

libpng is a library of functions for parsing the PNG graphics format used by various applications. A buffer overflow vulnerability exists in libpng 'pngcombinerow' because it fails to properly validate user-supplied input. An attacker could use these vulnerabilities to execute arbitrary code in t...

PT-2015-3269 · Libpng +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.5.21 libpng versions 1.6.x prior to 1.6.16 Description: The issue is caused by a buffer overflow in the png read IDAT data function in pngrutil.c of the libpng library. This can be exploited by a remote attacker to...

PT-2015-3268 · Libpng +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.5.21 libpng versions 1.6.x prior to 1.6.16 Description: The issue is caused by a heap-based buffer overflow in the png combine row function of the libpng library. This can be exploited by a remote attacker using a...

F5 Networks BIG-IP : Libpng vulnerability (SOL15881)

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

SOL15881 - Libpng vulnerability CVE-2011-3048

The noted versions contain vulnerable code, but do not parse PNG images by default, and are therefore not vulnerable. Recommended action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version...

SOL15880 - Libpng vulnerability CVE-2008-6218

Recommended action ARX If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. To mitigate th...

RHEL 5 : rhev-hypervisor5 (RHSA-2012:0488)

An updated rhev-hypervisor5 package that fixes three security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...

VLC Media Player < 2.1.5 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is prior to 2.1.5. It is, therefore, affected by the following vulnerabilities : - An error exists in the pngpushreadchunk function within the file 'pngpread.c' from the included libpng library that can allow denial of service attacks...

F5 Networks BIG-IP : libpng vulnerability (SOL9988)

The PNG reference library libpng, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code by way of a crafted PNG file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

GLSA-201408-06 : libpng: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-06 libpng: Multiple vulnerabilities The pngpushreadchunk function in pngpread.c in the progressive decoder enters an infinite loop, when it encounters a zero-length IDAT chunk. In addition certain integer overflows have bee...

libpng: Multiple vulnerabilities

Background libpng is a standard library used to process PNG Portable Network Graphics images. It is used by several programs, including web browsers and potentially server processes. Description The pngpushreadchunk function in pngpread.c in the progressive decoder enters an infinite loop, when i...

libpng: unhandled zero-length PLTE chunk or NULL palette

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

AIX Java Advisory : java_apr2014_advisory.asc

The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities : - There is an information disclosure flaw in libjpeg and libjpeg-turbo allowing remote attackers access to uninitialized memory via crafted JPEG images. CVE-2013-6629 - A vulnerability ...

LibPNG <= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include png.h / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is no...

libpng <= 1.4.2 - Denial of Service Vulnerability

No description provided by source. / Exploit Title: libpng = 1.4.2 DoS Date: July 20, 2010 Author: kripthor Software Link: http://www.libpng.org/pub/png/libpng.html Version: all products that use libpng = 1.4.2 Tested on: Windows XP Pro SP3 Eng / Ubuntu 10 CVE : CVE-2010-1205 Notes: This crashes...

Fedora Update for mingw-libpng FEDORA-2014-6892

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libpng FEDORA-2014-6717

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : seamonkey (seamonkey-5834)

Mozilla SeaMonkey was updated to 2.7.2 to fix a security issue with the embedded libpng, where a integer overflow could allow remote attackers to crash the browser or potentially execute code CVE-2011-3026, %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : MozillaFirefox / MozillaThunderbird / mozilla-xulrunner192 / etc (openSUSE-2012-120)

the embedded copy of libpng was prone to a heap based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-120. The text description of this plugin is C SUSE LLC...