EUVD-2006-3331

Malware in sbrugna...

Mozilla Firefox 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow

Binary data 801253.prm...

Mozilla SeaMonkey 2.x < 2.7.2 'png_decompress_chunk' Integer Overflow

Binary data 801380.prm...

Mozilla Thunderbird 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow

Binary data 6327.prm...

Mozilla Firefox 10.x < 10.0.2 'png_decompress_chunk' Integer Overflow

Binary data 6325.prm...

SeaMonkey < 2.7.2 'png_decompress_chunk' Integer Overflow

The installed version of SeaMonkey is earlier than 2.7.2. Such versions are potentially affected by an integer overflow vulnerability. An integer overflow error exists in 'libpng', a library used by this application. When decompressing certain PNG image files, this error can allow a heap-based...

libpng: Heap buffer overflow in png_decompress_chunk (MFSA 2012-11)

Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation...

CVE-2010-0205

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

CVE-2010-0205: Uncontrolled Resource Consumption

The pngdecompresschunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of...

CVE-2006-3334

Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunkname"...

CVE-2006-3334

Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunkname"...

CVE-2006-3334

CVE-2006-3334 affects libpng versions before 1.2.12, where a buffer overflow in png_decompress_chunk (pngrutil.c) can trigger denial of service and possibly arbitrary code execution via chunk error handling/chunk_name vectors. The connected documents corroborate this, noting the vulnerability ari...

CVE-2006-3334: Undefined Security Weakness

Buffer overflow in the pngdecompresschunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunkname"...