VulnCheck KEV: CVE-2013-1331

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document...

PhotoLab Processing PNG Images Memory Corruption Vulnerability

PhotoLab is a Image Processing software developed by SELTECO Corporation company. A memory corruption vulnerability exists in the processing of PNG images. Allowing an attacker to exploit this vulnerability to construct a malformed PNG image can cause the program to crash; if successfully...

libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions

It was discovered that the pnggetPLTE and pngsetPLTE functions of libpng did not correctly calculate the maximum palette sizes for bit depths of less than 8. In case an application tried to use these functions in combination with properly calculated palette sizes, this could lead to a buffer...

libpng: Out-of-bounds read in png_convert_to_rfc1123

An array-indexing error was discovered in the pngconverttorfc1123 function of libpng. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image...

Vulnerabilities in the libpng library, which allow a hacker to trigger a service failure

The multiple vulnerabilities in the pngsetPLTE and pnggetPLTE functions of the libpng library are caused by buffer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure by inserting the IHDR header into a PNG image...

[SECURITY] Fedora 22 Update: libpng10-1.0.66-1.fc22

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

UBUNTU-CVE-2015-8897

The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service application crash via a crafted png file...

libpng security update

CentOS Errata and Security Advisory CESA-2015:2596 Updated libpng packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

libpng security update

CentOS Errata and Security Advisory CESA-2015:2594 Updated libpng packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

UBUNTU-CVE-2015-6818

The decodeihdrchunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR aka image header chunk in a PNG image, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted...

The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information

The vulnerability of the libpng package up to version 1.2.13 in the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Microsoft windows PNG Parsing Remote Information Disclosure Vulnerability

Microsoft Windows is a popular operating system. A remote information disclosure vulnerability exists in Microsoft windows PNG parsing, which can be exploited by remote attackers to obtain sensitive memory information due to a program's failure to properly handle uninitialized memory, by...

[SECURITY] Fedora 21 Update: libpng10-1.0.63-1.fc21

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

UBUNTU-CVE-2014-9665

The LoadSBitPng function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service integer overflow and heap-based buffer overflow or possibly have unspecified other impact by embedding a PNG file...

DEBIAN-CVE-2014-9601

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed...

PYSEC-2015-16

Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed...

MSN Messenger 6.2.0137 PNG Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12506/info A remotely exploitable buffer overflow exists in MSN Messenger and Windows Messenger. This vulnerability is related to parsing of Portable Network Graphics PNG image header data. Successful exploitation will...

Fedora Update for libpng12 FEDORA-2014-1770

Check for the Version of libpng12 OpenVAS Vulnerability Test Fedora Update for libpng12 FEDORA-2014-1770 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libpng12 FEDORA-2014-1766

Check for the Version of libpng12 OpenVAS Vulnerability Test Fedora Update for libpng12 FEDORA-2014-1766 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Internet Explorer PNG Image Rendering Memory Corruption - improved performance (MS05-025; CVE-2005-1211; CVE-2006-0025)

Portable Network Graphics PNG is a popular image file format. Specially crafted PNG files may be used to create a DoS condition and in some cases, arbitrary code execution...