libpng拒绝服务漏洞

Bugtraq ID:65776 CVE ID:CVE-2014-0333 libpng是一款多种应用程序所使用的解析PNG图形格式的函数库。 libpng16中的渐进式解码器在处理零长度IDAT块时存在安全漏洞，允许攻击者利用漏洞构建恶意文件，诱使用户解析，可使应用程序挂起。 0 libpng 1.6.0 -1.6.9 厂商补丁： libpng ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞： https://sourceforge.net/projects/libpng/files/libpng16/patch-libpng16-vu684412.diff...

ESXi 5.1 < Build 911593 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.1 host is affected by the following security vulnerabilities : - An input validation error exists in the function 'pngsettext2' in the libpng library that could allow memory corruption and arbitrary code execution. CVE-2011-3048 - A privilege escalation vulnerability exis...

Debian Security Advisory DSA 2439-1 (libpng - buffer overflow)

Glenn-Randers Pehrson discovered an buffer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed. OpenVAS Vulnerability Test $Id: deb24391.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2439-1 using...

CVE-2012-3425

The pngpushreadzTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service out-of-bounds read via a large availin field value in a PNG image...

USN-1402-1: libpng vulnerability

It was discovered that libpng did not properly process compressed chunks. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the progra...

[SECURITY] Fedora 14 Update: mingw32-libpng-1.4.8-1.fc14

MinGW Windows Libpng library...

[SECURITY] Fedora 15 Update: mingw32-libpng-1.4.8-1.fc15

MinGW Windows Libpng library...

libpng library multiple security vulnerabilities

Multiple vulnerabilities on PNG parsing...

Fedora Update for mingw32-libpng FEDORA-2011-8874

Check for the Version of mingw32-libpng OpenVAS Vulnerability Test Fedora Update for mingw32-libpng FEDORA-2011-8874 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Libpng库未知类型块处理远程代码执行漏洞

BUGTRAQ ID: 28770 CVECAN ID: CVE-2008-1382 libpng是多种应用程序所使用的解析PNG图形格式的函数库。 libpng库在处理畸形格式的PNG文件时存在漏洞，成功利用此漏洞允许本地攻击者读取敏感信息、导致拒绝服务或执行任意指令。 libpng库没有正确地处理未知类型的PNG块，如果使用该库的应用程序在特定情况下调用了pngsetreaduserchunkfn或pngsetkeepunknownchunks函数的话，长度为0的PNG块就会导致通过free调用使用未初始化的内存。 0 libpng libpng 1.2.0 - 1.2.26...