CVE-2011-2692

The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...

CVE-2011-2690

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogray function but not the pngsetexpand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and...

CVE-2011-2692

The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...

CVE-2011-2501

The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...

[SECURITY] Fedora 15 Update: mingw32-libpng-1.4.3-3.fc15

MinGW Windows Libpng library...

[SECURITY] Fedora 14 Update: mingw32-libpng-1.4.3-2.fc14

MinGW Windows Libpng library...

Security fix for the ALT Linux 5 package libpng version 1.2.46-alt1

July 13, 2011 Dmitry V. Levin 1.2.46-alt1 - Updated to 1.2.46 fixes: CVE-2011-2690, CVE-2011-2691, CVE-2011-2692...

Security fix for the ALT Linux 6 package libpng version 1.2.46-alt1

July 13, 2011 Dmitry V. Levin 1.2.46-alt1 - Updated to 1.2.46 fixes: CVE-2011-2690, CVE-2011-2691, CVE-2011-2692...

libpng invalid sCAL chunk processing vulnerability

Overview libpng reads uninitialized memory when processing invalid sCAL chunks. Description When libpng encounters a sCAL chunk that is empty it will read uninitialized memory. libpng also does not properly handle a sCAL chunk that lacks the terminating zero between the two strings...

About the security content of Safari 5.0.4

About the security content of Safari 5.0.4 Last Modified: March 09, 2011 Article: HT4566 Email this article Print this page Summary This document describes the security content of Safari 5.0.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until...

Gentoo Security Advisory GLSA 201010-01 (libpng)

The remote host is missing updates announced in advisory GLSA 201010-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201010-01 (libpng)

The remote host is missing updates announced in advisory GLSA 201010-01. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

iTunes 10.2 fixes multiple security vulnerabilities !

iTunes 10.2 comes with several new features, improvements and security fixes. libpng is updated to version 1.4.3 to address multiple vulnerabilities, the most serious of which may lead to arbitrary code execution. For Mac OS X v10.5 systems, this is addressed in Security Update 2010-007. A heap...

About the security content of iTunes 10.2

About the security content of iTunes 10.2 Last Modified: March 02, 2011 Article: HT4554 Email this article Print this page Summary This document describes the security content of iTunes 10.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a...

CVE-2011-0408

pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the pngdoexpandpalette function, the pngdorgbtogray function, and an...

CVE-2011-0408

pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the pngdoexpandpalette function, the pngdorgbtogray function, and an...

Integer overflow

pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the pngdoexpandpalette function, the pngdorgbtogray function, and an...

CVE-2011-0408

pngrtran.c in libpng 1.5.x before 1.5.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted palette-based PNG image that triggers a buffer overflow, related to the pngdoexpandpalette function, the pngdorgbtogray function, and an...

CVE-2011-0408

Summary: CVE-2011-0408 affects libpng 1.5.x prior to 1.5.1. The vulnerability is in the rgb-to-gray/expand palette pathways (pngrtran.c) and can trigger a buffer overflow via crafted palette-based PNG images, potentially causing an application crash or arbitrary code execution. Connected document...

Libpng 1.5.0 png_set_rgb_to_gray() vulnerability

Overview Libpng-1.5.0 introduced a vulnerability in the rgb-to-gray transform function. Description Libpng based applications that call the pngsetrgbtogray function from pngrtran.c are vulnerable. Libpng versions prior to 1.5.0 are not vulnerable. --- Impact An attacker may cause the application ...