[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 570-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 570-1] New libpng packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 570-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

DSA-571-1 libpng3 - buffer overflows, integer overflow

Bulletin has no description...

DSA-570-1 libpng - integer overflow

Bulletin has no description...

Debian DSA-498-1 : libpng - out of bound access

Steve Grubb discovered a problem in the Portable Network Graphics library libpng which is utilised in several applications. When processing a broken PNG image, the error handling routine will access memory that is out of bounds when creating an error message. Depending on machine architecture,...

Debian DSA-213-1 : libpng - buffer overflow

Glenn Randers-Pehrson discovered a problem in connection with 16-bit samples from libpng, an interface for reading and writing PNG Portable Network Graphics format files. The starting offsets for the loops are calculated incorrectly which causes a buffer overrun beyond the beginning of the row...

Debian DSA-536-1 : libpng - several vulnerabilities

Chris Evans discovered several vulnerabilities in libpng : - CAN-2004-0597 Multiple buffer overflows exist, including when handling transparency chunk data, which could be exploited to cause arbitrary code to be executed when a specially crafted PNG image is processed - CAN-2004-0598 Multiple NUL...

CVE-2002-1363

Portable Network Graphics PNG library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a buffer overflow attack on the row buffers...

CVE-2002-1363

CVE-2002-1363 affects libpng 1.2.5 and earlier, where incorrect offset calculations in the PNG library can cause a remote crash and potentially arbitrary code execution via a buffer overflow in row buffers. The vulnerability is evidenced in multiple advisories (Red Hat RHSA, Debian DSA) and is re...

GLSA-200407-06 : libpng: Buffer overflow on row buffers

The remote host is affected by the vulnerability described in GLSA-200407-06 libpng: Buffer overflow on row buffers Due to a wrong calculation of loop offset values, libpng contains a buffer overflow vulnerability on the row buffers. This vulnerability was initially patched in January 2003 but...

GLSA-200405-06 : libpng denial of service vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-06 libpng denial of service vulnerability libpng provides two functions pngchunkerror and pngchunkwarning for default error and warning messages handling. These functions do not perform proper bounds checking on the provide...

GLSA-200408-03 : libpng: Numerous vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200408-03 libpng: Numerous vulnerabilities libpng contains numerous vulnerabilities including NULL pointer dereference errors and boundary errors in various functions. Impact : An attacker could exploit these vulnerabilities to...

Mandrake Linux Security Advisory : libpng (MDKSA-2004:079)

Chris Evans discovered numerous vulnerabilities in the libpng graphics library, including a remotely exploitable stack-based buffer overrun in the pnghandletRNS function, dangerous code in pnghandlesBIT, a possible NULL pointer crash in pnghandleiCCP which is also duplicated in multiple other...

Mandrake Linux Security Advisory : mozilla (MDKSA-2004:082)

A number of security vulnerabilities in mozilla are addressed by this update for Mandrakelinux 10.0 users, including a fix for frame spoofing, a fixed popup XPInstall/security dialog bug, a fix for untrusted chrome calls, a fix for SSL certificate spoofing, a fix for stealing secure HTTP Auth...

CVE-2004-0768

The CVE-2004-0768 entry describes a vulnerability in libpng 1.2.5 and earlier where improper calculation of certain buffer offsets could allow a remote attacker to execute arbitrary code via a buffer overflow. Connected records reference disclosures and advisories; however, explicit remediation/v...

CVE-2004-0768

libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2004-0421

The Portable Network Graphics library libpng 1.0.15 and earlier allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message...

CVE-2004-0421

The Portable Network Graphics library libpng 1.0.15 and earlier allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message...