CVE-2010-1205

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/libpng-1.4.3-x8664-1slack13.1.txz: Upgraded. Upgraded to libpng-1.2.44...

CVE-2010-2249

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service memory consumption and application crash via a PNG image containing malformed Physical Scale aka sCAL chunks...

CVE-2010-1205

Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row...

PT-2010-1082 · Libpng +2 · Libpng +2

Name of the Vulnerable Software and Affected Versions: libpng versions prior to 1.4.3 libpng versions 1.4.x prior to 1.4.3 libpng versions prior to 1.2.44 Description: The issue is related to multiple vulnerabilities in the libpng package, which can be exploited remotely, leading to a denial of...

Security fix for the ALT Linux 6 package libpng version 1.2.44-alt1

June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...

Security fix for the ALT Linux 5 package libpng version 1.2.44-alt1

June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...

FreeBSD : png -- libpng decompression buffer overflow (edef3f2f-82cf-11df-bcce-0018f3e2eb82)

The PNG project describes the problem in an advisory : Several versions of libpng through 1.4.2 and through 1.2.43 in the older series contain a bug whereby progressive applications such as web browsers or the rpng2 demo app included in libpng could receive an extra row of image data beyond the...

openSUSE Security Update : libpng-devel (openSUSE-SU-2010:0257-1)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libpng-devel (openSUSE-SU-2010:0257-1)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : libpng-devel (openSUSE-SU-2010:0257-1)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE9 Security Update : libpng (YOU Patch Number 12599)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. VID 4fb5d2cd-4c77-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 4fb5d2cd-4c77-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: png

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : png -- libpng decompression denial of service (4fb5d2cd-4c77-11df-83fb-0015587e2cc1)

A vulnerability in libpng can result in denial of service conditions when a remote attacker tricks a victim to open a specially crafted PNG file. The PNG project describes the problem in an advisory : Because of the efficient compression method used in Portable Network Graphics PNG files, a small...

Debian Security Advisory DSA 2032-1 (libpng)

The remote host is missing an update to libpng announced via advisory DSA 2032-1. OpenVAS Vulnerability Test $Id: deb20321.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2032-1 libpng Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2032-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2032-1 : libpng - several vulnerabilities

Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2042 libpng does not properly parse 1-bit interlaced images with width values that are not divisible...

[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2032-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2032-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano April 11, 2010 http://www.debian.org/security/faq -...