3937 matches found
CVE-2004-0598
CVE-2004-0598 — libpng vulnerability : The png_handle_iCCP function in libpng 1.2.5 and earlier is vulnerable to a crafted PNG image that triggers a null dereference, causing an application crash (DoS). Affected: libpng up to and including 1.2.5. Mitigation: upgrade libpng to 1.2.5 or newer (as f...
CVE-2004-0599
Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...
CVE-2004-0599
CVE-2004-0599 describes multiple integer overflow vulnerabilities in libpng up to version 1.2.5 and earlier, affecting the PNG reading paths (png_read_png in pngread.c, png_handle_sPLT in pngrutil.c, and progressive display reading). Exploitation could allow a remote attacker to crash the applica...
US-CERT Technical Cyber Security Alert TA04-217A -- Multiple Vulnerabilities in libpng
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vulnerabilities in libpng Original release date: August 4, 2004 Last revised: -- Source: US-CERT Systems Affected Applications and systems that use the libpng library. Overview Several vulnerabilities exist in the libpng library, the most...
security flaw
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which 1 the pnghandletRNS function does not properly validate the length of transparency chunk tRNS data, or the 2 pnghandlesBIT or 3...
libpng integer overflow in image height processing
Overview The Portable Network Graphics library libpng contains a remotely exploitable vulnerability which could cause affected applications to crash. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics Interchange Format...
ImageMagick png vulnerability fix
Glenn Randers-Pehrson has contributed a fix for the png vulnerabilities discovered by Chris Evans...
libpng png_handle_sPLT() integer overflow
Overview The Portable Network Graphics library libpng contains a flaw that could introduce a remotely exploitable vulnerability. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics Interchange Format GIF. The libpng...
libpng png_handle_sBIT() performs insufficient bounds checking
Overview The Portable Network Graphics library libpng contains a flaw that could introduce a remotely exploitable vulnerability. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics Interchange Format GIF. The libpng...
Mandrake Linux Security Advisory : libpng (MDKSA-2002:049)
A buffer overflow was found in the in the progressive reader of the PNG library when the PNG datastream contains more IDAT data than indicated by the IHDR chunk. These deliberately malformed datastreams would crash applications thus potentially allowing an attacker to execute malicious code. Many...
Fedora Core 2 : libpng10-1.0.15-5 (2004-176)
During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...
Fedora Core 2 : libpng-1.2.5-5 (2004-175)
During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...
Fedora Core 1 : libpng-1.2.5-4 (2004-173)
During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code...
RHEL 2.1 / 3 : libpng (RHSA-2004:180)
Updated libpng packages that fix a out of bounds memory access are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. Steve Grubb discovered a out of bounds memory access flaw in libpng. An attacker cou...
RHEL 3 : libpng (RHSA-2004:249)
Updated libpng packages that fix a possible buffer overflow are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue...
Important: Red Hat Security Advisory: libpng security update
Updated libpng packages that fix a out of bounds memory access are now available. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. Steve Grubb discovered a out of bounds memory access flaw in libpng. An attacker cou...
[Full-Disclosure] [OpenPKG-SA-2004.017] OpenPKG Security Advisory (png)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.017 29-Apr-2004 Package: png Vulnerability: denial of service OpenPKG Specific: ...
DSA-498 libpng - out of bound access
Bulletin has no description...
CVE-2003-0444
Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths...
CVE-2003-0444
CVE-2003-0444 corresponds to a heap-based buffer overflow in gtksee, affecting GTKSee 0.5 and 0.5.1. The vulnerability is triggered when loading PNG images of certain color depths, allowing remote code execution. Debian’s security advisory DSA-337-1 fixes this in gtksee by upgrading to a correcte...