Lucene search
+L

3610 matches found

Prion
Prion
added 2009/01/15 5:30 p.m.28 views

Double free

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

5CVSS6.4AI score0.02558EPSS
SaveExploits0References10Affected Software2
NVD
NVD
added 2009/01/15 5:30 p.m.27 views

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

5CVSS6.2AI score0.02558EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2009/01/15 5:30 p.m.23 views

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

5CVSS6AI score0.02558EPSS
SaveExploits0References3
CVE
CVE
added 2009/01/15 5:00 p.m.84 views

CVE-2008-5907

The CVE-2008-5907 vulnerability affects libpng prior to 1.0.42 and 1.2.x prior to 1.2.34, where png_check_keyword could be manipulated via crafted PNG keywords to zero out an arbitrary memory location. The issue is characterized as context-dependent and not publicly detailed beyond the memory-wri...

5CVSS8.3AI score0.02558EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2009/01/15 5:00 p.m.44 views

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

8.5AI score0.02558EPSS
SaveExploits0References10
OpenVAS
OpenVAS
added 2008/12/23 12:00 a.m.35 views

Gentoo Security Advisory GLSA 200812-15 (povray)

The remote host is missing updates announced in advisory GLSA 200812-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.3AI score0.05514EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2008/12/23 12:00 a.m.36 views

Gentoo Security Advisory GLSA 200812-15 (povray)

The remote host is missing updates announced in advisory GLSA 200812-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.05514EPSS
SaveExploits2References2
Fedora
Fedora
added 2008/11/13 3:37 a.m.33 views

[SECURITY] Fedora 8 Update: libpng10-1.0.41-1.fc8

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

7.5CVSS3AI score0.05514EPSS
SaveExploits1
seebug.org
seebug.org
added 2008/10/28 12:00 a.m.32 views

Libpng库png_handle_tEXt()内存泄露漏洞

BUGTRAQ ID: 31920 libpng是多种应用程序所使用的解析PNG图形格式的函数库。 libpng库的pngrutil.c文件中的pnghandletEXt函数在处理特制的PNG图形时存在内存泄露错误。如果用户使用链接到该库的应用打开了特制图形文件的话,就可能触发这个漏洞,耗尽所有可用的内存资源。 0 libpng 1.2.32 libpng ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: a href=http://sourceforge.net/project/showfiles.php?groupid=5624...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2008/10/17 12:00 a.m.14 views

Solaris 5.9 (x86) : 139383-01

GNOME 2.0.2x86: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2008/10/17 12:00 a.m.33 views

Solaris 5.9 (sparc) : 139382-01

GNOME 2.0.2: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

9.6AI score0.05115EPSS
SaveExploits1References2
CERT
CERT
added 2008/10/02 12:00 a.m.38 views

libpng off-by-one vulnerability

Overview A vulnerability exists in libpng that may allow a remote attacker to cause a denial of service. Description A vulnerability in the way libpng handles files that contain multiple zTXt chunks may cause a denial of service. This vulnerability is due to an off-by-one error introduced in the...

4.3CVSS9AI score0.03343EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.32 views

Gentoo Security Advisory GLSA 200405-06 (libpng)

The remote host is missing updates announced in advisory GLSA 200405-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

5CVSS7.7AI score0.04107EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.22 views

Gentoo Security Advisory GLSA 200607-06 (libpng)

The remote host is missing updates announced in advisory GLSA 200607-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.0405EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.38 views

Gentoo Security Advisory GLSA 200711-08 (libpng)

The remote host is missing updates announced in advisory GLSA 200711-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.4AI score0.04769EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.27 views

Gentoo Security Advisory GLSA 200408-03 (libpng)

The remote host is missing updates announced in advisory GLSA 200408-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.82537EPSS
SaveExploits6References2
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.28 views

Gentoo Security Advisory GLSA 200804-15 (libpng)

The remote host is missing updates announced in advisory GLSA 200804-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.3AI score0.05514EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.36 views

Gentoo Security Advisory GLSA 200705-24 (libpng)

The remote host is missing updates announced in advisory GLSA 200705-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

5CVSS9.6AI score0.05115EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.29 views

Gentoo Security Advisory GLSA 200607-06 (libpng)

The remote host is missing updates announced in advisory GLSA 200607-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.7AI score0.0405EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.34 views

Gentoo Security Advisory GLSA 200408-03 (libpng)

The remote host is missing updates announced in advisory GLSA 200408-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

10CVSS0.4AI score0.82537EPSS
SaveExploits6
Rows per page
Query Builder