CVE-2012-3425

...

CVE-2012-3425

The pngpushreadzTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service out-of-bounds read via a large availin field value in a PNG image...

CVE-2012-3425: Improper Restriction of Operations within the Bounds of a Memory Buffer

The pngpushreadzTXt function in pngpread.c in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service out-of-bounds read via a large availin field value in a PNG image...

Libpng库'png_push_read_zTXt()'单字节拒绝服务漏洞

BUGTRAQ ID: 31049 CNCAN ID：CNCAN-2008090903 Libpng是一款多种应用程序所使用的解析PNG图形格式的函数库。 Libpng pngpushreadzTXt存在单字节错误，远程攻击者可以利用漏洞对链接此库的应用程序进行拒绝服务攻击。 问题代码存在于pngpushreadzTXt libpng-1.2.31/pngpread.c:1277-1288： pngcharp tmp; tmp = text; text = pngcharppngmallocpngptr, textsize + pnguint32pngptr-zbufsize -...

CVE-2008-3964

Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a PNG image with crafted zTXt chunks, related to 1 the pngpushreadzTXt function in pngread.c, and possibl...

CVE-2008-3964: Off-by-one Error

Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a PNG image with crafted zTXt chunks, related to 1 the pngpushreadzTXt function in pngread.c, and possibl...