CVE-2013-7354

Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service crash via a crafted image to the 1 pngsetsPLT or 2 pngsettext2 function, which triggers a heap-based buffer overflow...

PT-2014-1891 · Libpng +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.6.10 libpng versions prior to 1.5.14rc03 Description: The issue concerns multiple integer overflows in libpng that can be exploited remotely, leading to a denial of service crash due to a heap-based buffer overflow...

PT-2014-1890 · Libpng +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.5.14beta08 libpng versions prior to 1.6.10 Description: The issue is related to an integer overflow in the png set unknown chunks function, which can cause a denial of service, leading to a segmentation fault and...

libpng: unhandled zero-length PLTE chunk or NULL palette

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

libpng: unhandled zero-length PLTE chunk or NULL palette

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

Fedora Update for mingw-libpng FEDORA-2014-4564

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-libpng FEDORA-2014-4564

Check for the Version of mingw-libpng OpenVAS Vulnerability Test Fedora Update for mingw-libpng FEDORA-2014-4564 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora 20 : mingw-libpng-1.6.10-1.fc20 (2014-4564)

libpng 1.6.10 bug fix release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

[SECURITY] Fedora 20 Update: mingw-libpng-1.6.10-1.fc20

MinGW Windows Libpng library...

Updated libpng package fixes security vulnerability

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero CVE-2014-0333...

MGASA-2014-0131 Updated libpng package fixes security vulnerability

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero CVE-2014-0333...

Libpng png_handle_sBIT Local Buffer Overflow - Ver2 (CVE-2004-0597)

A buffer overflow vulnerability has been reported in Libpng. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

Design/Logic Flaw

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

CVE-2014-0333

CVE-2014-0333 affects libpng 1.6.x up to 1.6.9. The PNG progressive decoder’s png_push_read_chunk in pngpread.c can enter an infinite loop and cause CPU exhaustion when it processes an IDAT chunk of length zero, enabling a denial of service via a remote attacker. The issue is tied to the png_push...

CVE-2014-0333

The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero...

libpng拒绝服务漏洞

Bugtraq ID:65776 CVE ID:CVE-2014-0333 libpng是一款多种应用程序所使用的解析PNG图形格式的函数库。 libpng16中的渐进式解码器在处理零长度IDAT块时存在安全漏洞，允许攻击者利用漏洞构建恶意文件，诱使用户解析，可使应用程序挂起。 0 libpng 1.6.0 -1.6.9 厂商补丁： libpng ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞： https://sourceforge.net/projects/libpng/files/libpng16/patch-libpng16-vu684412.diff...