RHEL 5 : cairo (RHSA-2007:1078)

Updated Cairo packages that resolve a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Cairo is a vector graphics library designed to provide high-quality display and print output...

Important: Red Hat Security Advisory: cairo security update

Updated Cairo packages that resolve a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Cairo is a vector graphics library designed to provide high-quality display and print output...

Ubuntu 6.06 LTS / 6.10 / 7.04 : libgd2 vulnerabilities (USN-473-1)

A buffer overflow was discovered in libgd2's font renderer. By tricking an application using libgd2 into rendering a specially crafted string with a JIS encoded font, a remote attacker could read heap memory or crash the application, leading to a denial of service. CVE-2007-0455 Xavier Roche...

GLSA-200711-08 : libpng: Multiple Denials of Service

The remote host is affected by the vulnerability described in GLSA-200711-08 libpng: Multiple Denials of Service An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the u...

libpng: Multiple Denials of Service

Background libpng is a free ANSI C library used to process and manipulate PNG images. Description An off-by-one error when handling ICC profile chunks in the pngsetiCCP function was discovered CVE-2007-5266. George Cook and Jeff Phillips reported several errors in pngrtran.c, the use of logical...

Multiple image viewers multiple security vulnerabilities

Multiple buffer overflows on BPM, TIFF, XPM, CLP, PSP, RAS, IFF, PNG images parsing...

zlib compression library DoS

DoS on invalid data stream including ones of PNG files...

CentOS 3 / 4 / 5 : libpng (CESA-2007:0992)

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

RHEL 2.1 / 3 / 4 / 5 : libpng (RHSA-2007:0992)

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

[SECURITY] Fedora 7 Update: libpng-1.2.22-1.fc7

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

libpng security update

CentOS Errata and Security Advisory CESA-2007:0992-01 Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of...

libpng, libpng10 security update

CentOS Errata and Security Advisory CESA-2007:0992 Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functio...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libpng package contains a library of functions for creating and manipulating PNG Portable Netwo...

libpng multiple security vulnerabilities

Multiple DoS conditions on PNG images parsing...

CVE-2007-5266

Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.0.29 beta1 and 1.2.x before 1.2.21 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image that prevents a name field from being NULL terminated...

Buffer overflow

pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use 1 logical instead of bitwise operations and 2 incorrect comparisons, which might allow remote attackers to cause a denial of service crash via a crafted PNG image...

Out-of-bounds

Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service crash via crafted 1 pCAL pnghandlepCAL, 2 sCAL pnghandlesCAL, 3 tEXt pngpushreadtEXt, 4 iTXt pnghandleiTXt, and 5 ztXT pnghandleztXt chunking in PNG images, which trigger...

Code injection

Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...

CVE-2007-5267

Off-by-one error in ICC profile chunk handling in the pngsetiCCP function in pngset.c in libpng before 1.2.22 beta1 allows remote attackers to cause a denial of service crash via a crafted PNG image, due to an incorrect fix for CVE-2007-5266...

CVE-2007-5268

pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use 1 logical instead of bitwise operations and 2 incorrect comparisons, which might allow remote attackers to cause a denial of service crash via a crafted PNG image...