Design/Logic Flaw

The PNG reference library aka libpng before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file that triggers a free of an...

CVE-2009-0040

The PNG reference library aka libpng before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file that triggers a free of an...

CVE-2009-0040

The CVE-2009-0040 issue affects the PNG reference library (libpng) as used in pngcrush and other apps. A crafted PNG can trigger a free of an uninitialized pointer in png_read_png, pCAL chunk handling, or 16-bit gamma table setup, enabling denial of service or possibly arbitrary code execution. A...

CVE-2009-0040: Access of Uninitialized Pointer

The PNG reference library aka libpng before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file that triggers a free of an...

CVE-2008-6218

Memory leak in the pnghandletEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service memory exhaustion via a crafted PNG file...

CVE-2008-6218

Memory leak in the pnghandletEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service memory exhaustion via a crafted PNG file...

libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0040 Here are the...

CVE-2008-6218

Libpng vulnerability CVE-2008-6218: memory leak in png_handle_tEXt in pngrutil.c is triggered by a crafted PNG, affecting libpng before 1.2.33 rc02 and 1.4.0 beta36, enabling a context‑dependent DoS due to memory exhaustion. Remediation is to upgrade to fixed Libpng versions (or newer) as indicat...

CVE-2008-6218

Memory leak in the pnghandletEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service memory exhaustion via a crafted PNG file...

CVE-2008-6218

Memory leak in the pnghandletEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service memory exhaustion via a crafted PNG file...

Libpng库未初始化指针数组内存破坏漏洞

BUGTRAQ ID: 33827 libpng是多种应用程序所使用的解析PNG图形格式的函数库。 如果应用程序耗尽内存的话，libpng库在释放数组单元之前没有正确的初始化某些指针数组，这可能导致内存破坏。 在malloc包含有N个单元的数组时： for i=0; iN; i++ malloc elementi; 如果应用程序在循环期间耗尽了内存的话，就不会初始化一些单元指针，之后Libpng会跳转到一个试图释放数组中所有单元（包括未初始化的区）的cleanup进程。...

CVE-2008-6218: Undefined Security Weakness

Memory leak in the pnghandletEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service memory exhaustion via a crafted PNG file...

pngcrush -- libpng Uninitialised Pointer Arrays Vulnerability

Secunia reports: A vulnerability has been reported in Pngcrush, which can be exploited by malicious people to potentially compromise a user's system. The vulnerability is caused due to the use of vulnerable libpng code...

Fedora Update for libpng FEDORA-2008-4947

Check for the Version of libpng OpenVAS Vulnerability Test Fedora Update for libpng FEDORA-2008-4947 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for libpng FEDORA-2008-4847

Check for the Version of libpng OpenVAS Vulnerability Test Fedora Update for libpng FEDORA-2008-4847 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for libpng FEDORA-2008-4910

Check for the Version of libpng OpenVAS Vulnerability Test Fedora Update for libpng FEDORA-2008-4910 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for libpng FEDORA-2008-4847

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libpng FEDORA-2008-4910

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libpng FEDORA-2008-4947

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE 10 Security Update : libpng (libpng-5944)

This update of libpng fixes the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0. CVE-2008-5907 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...