libpng pngwutil.c NULL pointer Vulnerability

The host has libpng installed and is prone to memory overwrite vulnerability. OpenVAS Vulnerability Test $Id: secpodlibpngnullpntrvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ libpng pngwutil.c NULL pointer Vulnerability Authors: Chandan S Copyright: Copyright c 2009 SecPod, http://www.secpod.org...

libpng Version Detection

Detects the installed version of libpng. The script logs in via ssh, searches for executable Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

libpng pngwutil.c NULL pointer Vulnerability

libpng is prone to a memory overwrite vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Double free

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

CVE-2008-5907

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

CVE-2008-5907

The CVE-2008-5907 vulnerability affects libpng prior to 1.0.42 and 1.2.x prior to 1.2.34, where png_check_keyword could be manipulated via crafted PNG keywords to zero out an arbitrary memory location. The issue is characterized as context-dependent and not publicly detailed beyond the memory-wri...

CVE-2008-5907: Undefined Security Weakness

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

Gentoo Security Advisory GLSA 200812-15 (povray)

The remote host is missing updates announced in advisory GLSA 200812-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200812-15 (povray)

The remote host is missing updates announced in advisory GLSA 200812-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[SECURITY] Fedora 8 Update: libpng10-1.0.41-1.fc8

The libpng10 package contains an old version of libpng, a library of functi ons for creating and manipulating PNG Portable Network Graphics image format files. This package is needed if you want to run binaries that were linked dynamic ally with libpng 1.0.x...

Libpng库png_handle_tEXt()内存泄露漏洞

BUGTRAQ ID: 31920 libpng是多种应用程序所使用的解析PNG图形格式的函数库。 libpng库的pngrutil.c文件中的pnghandletEXt函数在处理特制的PNG图形时存在内存泄露错误。如果用户使用链接到该库的应用打开了特制图形文件的话，就可能触发这个漏洞，耗尽所有可用的内存资源。 0 libpng 1.2.32 libpng ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a href=http://sourceforge.net/project/showfiles.php?groupid=5624...

Solaris 5.9 (sparc) : 139382-01

GNOME 2.0.2: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 5.9 (x86) : 139383-01

GNOME 2.0.2x86: libpng Patch. Date this patch was last updated by Sun : Oct/03/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

libpng off-by-one vulnerability

Overview A vulnerability exists in libpng that may allow a remote attacker to cause a denial of service. Description A vulnerability in the way libpng handles files that contain multiple zTXt chunks may cause a denial of service. This vulnerability is due to an off-by-one error introduced in the...

Gentoo Security Advisory GLSA 200611-09 (libpng)

The remote host is missing updates announced in advisory GLSA 200611-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200408-03 (libpng)

The remote host is missing updates announced in advisory GLSA 200408-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-08 (libpng)

The remote host is missing updates announced in advisory GLSA 200711-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...