libpng chunk decompression integer overflow vulnerability

Overview The libpng library contains an integer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphi...

libpng integer overflow

Integer overflow on PNG parsing leads to heap buffer overflow...

Mozilla Foundation Security Advisory 2012-11

Mozilla Foundation Security Advisory 2012-11 Title: libpng integer overflow Impact: Critical Announced: February 16, 2012 Reporter: Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 10.0.2 Firefox ESR 10.0.2 Firefox 3.6.27 Thunderbird 10.0.2 Thunderbird ESR 10.0.2 Thunderbird 3.1.19...

Mandriva Linux Security Advisory : mozilla (MDVSA-2012:022-1)

Security issues were identified and fixed in mozilla firefox and thunderbird : An integer overflow in the libpng library can lead to a heap-buffer overflow when decompressing certain PNG images. This leads to a crash, which may be potentially exploitable CVE-2011-3026. The mozilla firefox and...

[SECURITY] Fedora 16 Update: libpng-1.2.46-2.fc16

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

RHEL 6 : libpng (RHSA-2012:0317)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0317 advisory. The libpng packages contain a library of functions for creating and manipulating PNG Portable Network Graphics image format files. A heap-based buffe...

Firefox 3.6.x < 3.6.27 png_decompress_chunk Integer Overflow (Mac OS X)

The installed version of Firefox 3.6.x is earlier than 3.6.27 and is, therefore, potentially affected by an integer overflow vulnerability in libpng, a library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execute...

RedHat Update for libpng RHSA-2012:0317-01

Check for the Version of libpng OpenVAS Vulnerability Test RedHat Update for libpng RHSA-2012:0317-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu Update for libpng USN-1367-1

Ubuntu Update for Linux kernel vulnerabilities USN-1367-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13671.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libpng USN-1367-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for firefox USN-1367-2

Ubuntu Update for Linux kernel vulnerabilities USN-1367-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN13672.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for firefox USN-1367-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Firefox < 10.0.2 png_decompress_chunk Integer Overflow (Mac OS X)

The installed version of Firefox is earlier than 10.0.2 and is, therefore, potentially affected by an integer overflow vulnerability in libpng, a library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execute arbitrar...

CentOS 4 / 5 / 6 : libpng / libpng10 (CESA-2012:0317)

Updated libpng and libpng10 packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Google Chrome Multiple Vulnerabilities - February 12 (Linux 01)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb12lin01.nasl 6521 2017-07-04 14:51:10Z cfischer $ Google Chrome Multiple Vulnerabilities - February 12 Linux 01 Authors: Madhuri D Copyright: Copyright c 201...

Thunderbird 3.1.x < 3.1.19 png_decompress_chunk Integer Overflow (Mac OS X)

The installed version of Thunderbird 3.1.x is earlier than 3.1.19 and is, therefore, potentially affected by an integer overflow vulnerability in libpng, a library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execut...

Fedora 16 : libpng-1.2.46-2.fc16 (2012-1922)

Fix nasty buffer overrun bug, CVE-2011-3026 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Thunderbird 10.x < 10.0.2 png_decompress_chunk Integer Overflow (Mac OS X)

The installed version of Thunderbird 10.x is earlier than 10.0.2 and is, therefore, potentially affected by an integer overflow vulnerability in libpng, a library used by this application. When decompressing certain PNG image files, this could be exploited to crash the application or even execute...

Ubuntu: Security Advisory (USN-1367-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 17.0.963.56 Multiple Vulnerabilities (Feb 2012) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 17.0.963.56 Multiple Vulnerabilities (Feb 2012) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1367-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...