CVE-2004-0421

The Portable Network Graphics library libpng 1.0.15 and earlier allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message...

LibPNG 1.2.5 - png_jmpbuf() Local Buffer Overflow

LibPNG 1.2.5 - pngjmpbuf Local Buffer Overflow include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not...

LibPNG <= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ========================================================== LibPNG include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of...

LibPNG 1.2.5 - 'png_jmpbuf()' Local Buffer Overflow

include include include "png.h" / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is not already defined by libpng!. / ifndef pngjmpbuf...

LibPNG Graphics Library - Remote Buffer Overflow

LibPNG Graphics Library - Remote Buffer Overflow / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po outfile -all u need to give is retaddr, the default file it creates is controlled by the defin...

LibPNG Graphics Library Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ====================================================== LibPNG Graphics Library Remote Buffer Overflow Exploit ====================================================== / exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com...

LibPNG Graphics Library - Remote Buffer Overflow

/ exploit for libpng, tested on version 1.2.5 infamous42md AT hotpop DOT com shouts to mitakeet hope u patched :D n00batlocalho.outernet ./po Usage: ./po outfile -all u need to give is retaddr, the default file it creates is controlled by the define below, or u can pass a diff outfile name on the...

Slackware 9.0, libpng correction

In the previous advisory for libpng SSA:2004-222-01, the URL provided for the Slackware 9.0 patch mistakenly pointed to the old unpatched package. Slackware 9.0 users should follow the URL below for the new package:...

Mac OS X Multiple Vulnerabilities (Security Update 2004-08-09)

The remote host is missing Security Update 2004-08-09. libpng is a library used for manipulating graphics files. Several buffer overflows have been discovered in libpng. A remote attacker could exploit these vulnerabilities by tricking a user into opening a maliciously crafted PNG file, resulting...

libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, and -current to fix security issues. These issues could cause program crashes, or possibly allow arbitrary code embedded in a malicious PNG image to execute. The PNG library is widely used within the system, so all sites should...

CVE-2004-0597

Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which 1 the pnghandletRNS function does not properly validate the length of transparency chunk tRNS data, or the 2 pnghandlesBIT or 3...

CVE-2004-0598

CVE-2004-0598 — libpng vulnerability : The png_handle_iCCP function in libpng 1.2.5 and earlier is vulnerable to a crafted PNG image that triggers a null dereference, causing an application crash (DoS). Affected: libpng up to and including 1.2.5. Mitigation: upgrade libpng to 1.2.5 or newer (as f...

CVE-2004-0599

Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...

CVE-2004-0597

CVE-2004-0597 describes multiple buffer overflows in libpng 1.2.5 and earlier caused by insufficient bounds checks in png_handle_tRNS, png_handle_sBIT, and png_handle_hIST. This allows remote attackers to execute arbitrary code via crafted PNG images. Connected sources note that some advisories p...

CVE-2004-0598

The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...

CVE-2004-0599

CVE-2004-0599 describes multiple integer overflow vulnerabilities in libpng up to version 1.2.5 and earlier, affecting the PNG reading paths (png_read_png in pngread.c, png_handle_sPLT in pngrutil.c, and progressive display reading). Exploitation could allow a remote attacker to crash the applica...

[SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 536-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 4th, 2004 http://www.debian.org/security/faq -...

Fedora Core 1 : libpng10-1.0.15-7 (2004-236)

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it wou...

Fedora Core 1 : libpng-1.2.5-7 (2004-237)

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it wou...

Fedora Core 2 : libpng10-1.0.15-8 (2004-238)

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it wou...