Out-of-bounds

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in t...

CVE-2009-2042

The CVE-2009-2042 issue affects libpng before 1.2.37. The vulnerability arises when parsing 1-bit interlaced PNGs with width values not divisible by 8, causing uninitialized bits to be processed in certain rows. This can allow remote attackers to read portions of memory via out-of-bounds pixels i...

CVE-2009-2042

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in t...

CVE-2009-2042

libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote attackers to read portions of sensitive memory via "out-of-bounds pixels" in t...

Solaris Update for libpng 137080-01

Check for the Version of libpng OpenVAS Vulnerability Test Solaris Update for libpng 137080-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for libpng 137080-01

Check for the Version of libpng OpenVAS Vulnerability Test Solaris Update for libpng 137080-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for libpng 137081-01

Check for the Version of libpng OpenVAS Vulnerability Test Solaris Update for libpng 137081-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for libpng 137081-01

Check for the Version of libpng OpenVAS Vulnerability Test Solaris Update for libpng 137081-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0007 Synopsis: VMware Hosted products and ESX and ESXi patches resolve security issues Issue date: 2009-05-28 Updated on:...

CentOS Security Advisory CESA-2009:0333 (libpng)

The remote host is missing updates to libpng announced in advisory CESA-2009:0333. CESA-2009:0333 63901 4 $Id: ovcesa20090333.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0333 libpng Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:0333 (libpng)

The remote host is missing updates to libpng announced in advisory CESA-2009:0333. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Ubuntu 8.04 LTS / 8.10 : firefox-3.0, xulrunner-1.9 vulnerabilities (USN-728-1)

Glenn Randers-Pehrson discovered that the embedded libpng in Firefox did not properly initialize pointers. If a user were tricked into viewing a malicious website with a crafted PNG file, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of t...

FreeBSD : libpng denial-of-service (3a408f6f-9c52-11d8-9366-0020ed76ef5a)

Steve Grubb reports a buffer read overrun in libpng's pngformatbuffer function. A specially constructed PNG image processed by an application using libpng may trigger the buffer read overrun and possibly result in an application crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Fedora 10 : mingw32-libpng-1.2.35-1.fc10 (2009-2131)

Update to libpng 1.2.35, to fix CVE-2009-0040. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libpng vulnerabilities (USN-730-1)

It was discovered that libpng did not properly perform bounds checking in certain operations. An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng. This issue only affected Ubuntu 8.04 LTS. CVE-2007-5268, CVE-2007-5269 Tavis...

Mandriva Linux Security Advisory : libpng (MDVSA-2008:156)

Tavis Ormandy of the Google Security Team discovered a flaw in how libpng handles zero-length unknown chunks in PNG files, which could lead to memory corruption in applications that make use of certain functions CVE-2008-1382. The updated packages have been patched to correct this issue...

Fedora 10 : libpng-1.2.35-1.fc10 (2009-2112)

Fixes CVE-2009-0040 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Mandriva Linux Security Advisory : libpng (MDVSA-2009:051)

A number of vulnerabilities have been found and corrected in libpng : Fixed 1-byte buffer overflow in pngpread.c CVE-2008-3964. This was allready fixed in Mandriva Linux 2009.0. Fix the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0 CVE-2008-5907. Fix a...

FreeBSD : libpng stack-based buffer overflow and other code concerns (f9e3e60b-e650-11d8-9b0a-000347a4fa7d)

Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people to compromise a vulnerable system or cause a DoS Denial of Service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6194)

The Mozilla Firefox Browser was refreshed to the current MOZILLA18 branch state around fix level 2.0.0.22. Security issues identified as being fixed are: MFSA 2009-01 / CVE-2009-0352 / CVE-2009-0353: Mozilla developers identified and fixed several stability bugs in the browser engine used in...