CVE-2011-3048

CVE-2011-3048 affects libpng via the png_set_text_2() routine in libpng, where crafted PNG text chunks can trigger a memory allocation failure, causing a heap-based buffer overflow that may crash or allow arbitrary code execution. Impact applies to libpng 1.0.x < 1.0.59, 1.2.x < 1.2.49, 1.4...

CVE-2011-3048

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

libpng png_inflate Buffer Overflow (CVE-2011-3045)

An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification...

libpng png_decompress_chunk Integer Overflow (CVE-2011-3026)

An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification...

libpng png_decompress_chunk Integer Overflow - ver 2 (CVE-2011-3026)

An integer overflow vulnerability has been reported in libpng, an open source implementation of the PNG specification. The vulnerability is due to a heap allocation in the function pngdecompresschunk. Remote attackers could exploit this vulnerability by sending a specially crafted PNG file to the...

Debian Security Advisory DSA 2446-1 (libpng)

The remote host is missing an update to libpng announced via advisory DSA 2446-1. OpenVAS Vulnerability Test $Id: deb24461.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2446-1 libpng Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Medium: libpng

Issue Overview: A heap-based buffer overflow flaw was found in the way libpng processed tEXt chunks in PNG image files. An attacker could create a specially-crafted PNG image file that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-2446-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libpng FEDORA-2012-5515

Check for the Version of libpng OpenVAS Vulnerability Test Fedora Update for libpng FEDORA-2012-5515 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

RedHat Update for libpng RHSA-2012:0523-01

Check for the Version of libpng OpenVAS Vulnerability Test RedHat Update for libpng RHSA-2012:0523-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for libpng FEDORA-2012-5518

Check for the Version of libpng OpenVAS Vulnerability Test Fedora Update for libpng FEDORA-2012-5518 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

RedHat Update for libpng RHSA-2012:0523-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libpng FEDORA-2012-5518

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libpng FEDORA-2012-5515

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 / 6 : libpng (RHSA-2012:0523)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0523 advisory. The libpng packages contain a library of functions for creating and manipulating PNG Portable Network Graphics image format files. A heap-based...

CentOS 5 / 6 : libpng (CESA-2012:0523)

Updated libpng packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

libpng security update

CentOS Errata and Security Advisory CESA-2012:0523 Updated libpng packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS ba...

libpng: memory corruption flaw

The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocati...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...