CVE-2013-6954

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

CVE-2013-6954

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

CVE-2013-6954

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

CVE-2013-6954

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

CVE-2013-6954

Summary of findings (CVE-2013-6954): The vulnerability exists in the libpng project where the function png_do_expand_palette in versions before 1.6.8 can be triggered by a crafted PNG image, specifically a PLTE chunk of zero bytes or a NULL palette, causing a NULL pointer dereference and applicat...

CVE-2013-6954: NULL Pointer Dereference

The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PLTE chunk of zero bytes or 2 a NULL palette, related to pngrtran.c and pngset.c...

PT-2014-1614 · Libpng +5 · Libpng +5

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.6.8 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This can be achieved via a PLTE chunk of zero bytes or a NULL palette,...

libpng 1.6.1 through 1.6.7 contain a null-pointer dereference vulnerability

Overview libpng versions 1.6.1 through 1.6.7 fail to reject colormapped images with empty palettes, leading to a null-pointer dereference crash in pngdoexpandpalette. Description The PNG Development Group has reported that "libpng versions 1.6.1 through 1.6.7 fail to reject colormapped images wit...

ESXi 5.1 < Build 911593 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.1 host is affected by the following security vulnerabilities : - An input validation error exists in the function 'pngsettext2' in the libpng library that could allow memory corruption and arbitrary code execution. CVE-2011-3048 - A privilege escalation vulnerability exis...

Debian Security Advisory DSA 2439-1 (libpng - buffer overflow)

Glenn-Randers Pehrson discovered an buffer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb24391.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2439-1 using...

Debian: Security Advisory (DSA-2439-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : libpng (ALAS-2012-56)

A heap-based buffer overflow flaw was found in the way libpng processed compressed chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of...

Amazon Linux AMI : libpng (ALAS-2012-49)

A heap-based buffer overflow flaw was found in libpng. An attacker could create a specially crafted PNG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application. CVE-2011-3026 C Tenable...

Amazon Linux AMI : libpng (ALAS-2012-68)

A heap-based buffer overflow flaw was found in the way libpng processed tEXt chunks in PNG image files. An attacker could create a specially crafted PNG image file that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the...

Oracle Linux 5 : Moderate: / libpng (ELSA-2007-0992)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0992 advisory. 1.2.7-3.el45.1 - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269 Resolves: 337501 - Update License tag and some other obsolete bits ...

Oracle Linux 5 : Moderate: / libpng (ELSA-2007-0356)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0356 advisory. libpng-1.2.7-3.el4: 1.2.7-3.el4 - Add patch to fix CVE-2006-5793 Resolves: 215405 1.2.7-2.el4 - Add patch to fix CVE-2007-2445 Resolves: 239543...

Oracle Linux 5 / 6 : libpng (ELSA-2012-0523)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0523 advisory. 2:1.2.49-1 - Update to libpng 1.2.49, for minor security issues CVE-2011-3048 Resolves: 812714 Tenable has extracted the preceding description block directl...

Oracle Linux 5 / 6 : libpng (ELSA-2012-0317)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0317 advisory. 2:1.2.46-2 - Fix CVE-2011-3026 Resolves: 791007 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 6 : libpng (ELSA-2011-1105)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1105 advisory. 2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: 721305 Tenable has...

Oracle Linux 5 / 6 : libpng (ELSA-2012-0407)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0407 advisory. 2:1.2.48-1 - Update to libpng 1.2.48, for minor security issues CVE-2011-3045 Resolves: 801663 Tenable has extracted the preceding description block directl...