{"id": "SECURITYVULNS:DOC:11260", "bulletinFamily": "software", "title": "[SA18654] libpng "png_set_strip_alpha()" Buffer Overflow Vulnerability", "description": "\r\nTITLE:\r\nlibpng "png_set_strip_alpha()" Buffer Overflow Vulnerability\r\n\r\nSECUNIA ADVISORY ID:\r\nSA18654\r\n\r\nVERIFY ADVISORY:\r\nhttp://secunia.com/advisories/18654/\r\n\r\nCRITICAL:\r\nModerately critical\r\n\r\nIMPACT:\r\nDoS, System access\r\n\r\nWHERE:\r\n>From remote\r\n\r\nSOFTWARE:\r\nlibpng 1.x\r\nhttp://secunia.com/product/3439/\r\n\r\nDESCRIPTION:\r\nA vulnerability has been reported in libpng, which can be exploited\r\nby malicious people to cause a DoS (Denial of Service) against\r\napplications using libpng or potentially compromise a vulnerable\r\nsystem.\r\n\r\nThe vulnerability is caused due to a boundary error in the\r\n"png_set_strip_alpha()" function within the handling of a PNG image\r\nfile containing alpha channels. This can be exploited to cause a\r\nheap-based buffer overflow via a specially-crafted PNG file.\r\n\r\nSuccessful exploitation requires that the application is written to\r\nstrip the alpha channel from a PNG file.\r\n\r\nThe vulnerability has been reported in versions 1.0.16, 1.0.17,\r\n1.2.6, and 1.2.7.\r\n\r\nSOLUTION:\r\nUpdate to version 1.0.18 or 1.2.8.\r\nhttp://www.libpng.org/pub/png/libpng.html\r\n\r\nPROVIDED AND/OR DISCOVERED BY:\r\nReported by vendor.\r\n\r\nORIGINAL ADVISORY:\r\nRed Hat Bugzilla:\r\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455\r\n\r\n----------------------------------------------------------------------\r\n\r\nAbout:\r\nThis Advisory was delivered by Secunia as a free service to help\r\neverybody keeping their systems up to date against the latest\r\nvulnerabilities.\r\n\r\nSubscribe:\r\nhttp://secunia.com/secunia_security_advisories/\r\n\r\nDefinitions: (Criticality, Where etc.)\r\nhttp://secunia.com/about_secunia_advisories/\r\n\r\n\r\nPlease Note:\r\nSecunia recommends that you verify all advisories you receive by\r\nclicking the link.\r\nSecunia NEVER sends attached files with advisories.\r\nSecunia does not advise people to install third party patches, only\r\nuse those supplied by the vendor.\r\n", "published": "2006-02-01T00:00:00", "modified": "2006-02-01T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:11260", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:15", "edition": 1, "viewCount": 3, "enchantments": {"score": {"value": 5.9, "vector": "NONE", "modified": "2018-08-31T11:10:15", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2014-2595", "CVE-2018-11260", "CVE-2017-11260", "CVE-2015-9286", "CVE-2019-11260", "CVE-2008-7273", "CVE-2008-7272"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310812555", "OPENVAS:1361412562310812548", "OPENVAS:1361412562310812553", "OPENVAS:1361412562310812556", "OPENVAS:1361412562310812552", "OPENVAS:1361412562310812551", "OPENVAS:1361412562310812557", "OPENVAS:1361412562310812546", "OPENVAS:1361412562310812554", "OPENVAS:1361412562310812547"]}, {"type": "trendmicroblog", "idList": ["TRENDMICROBLOG:3BC4D55C7B197F32FEF9A2D171ACD8AB"]}], "modified": "2018-08-31T11:10:15", "rev": 2}, "vulnersScore": 5.9}, "affectedSoftware": []}

{"rst": [{"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **24[.]139.24.176** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **41**.\n First seen: 2021-02-13T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **shellprobe**.\nASN 11260: (First IP 24.139.0.0, Last IP 24.139.31.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Garson\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-13T00:00:00", "id": "RST:5DEFE87B-E50C-3047-8737-FFCBEBEC141A", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 24.139.24.176", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **24[.]231.70.85** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **14**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **generic**.\nASN 11260: (First IP 24.231.64.0, Last IP 24.231.95.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Elliot Lake\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:F4995B63-0EEE-3E6D-B6F5-693BCD6B42AF", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 24.231.70.85", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **24[.]231.88.85** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **20**.\n First seen: 2020-12-29T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **generic**.\nWe found that the IOC is used by: **emotet**.\nASN 11260: (First IP 24.231.64.0, Last IP 24.231.95.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Omemee\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-29T00:00:00", "id": "RST:969FD046-E3BA-3795-9245-C0FD2EB608A6", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 24.231.88.85", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **67[.]204.218.127** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **33**.\n First seen: 2021-02-05T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **generic**.\nASN 11260: (First IP 67.204.192.0, Last IP 67.204.255.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Greater Sudbury\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-05T00:00:00", "id": "RST:54F06391-C021-30A0-954E-BA0DA14FFD47", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 67.204.218.127", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **71[.]7.255.193** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **33**.\n First seen: 2021-02-06T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **generic**.\nASN 11260: (First IP 71.7.142.0, Last IP 71.7.255.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Terrenceville\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-06T00:00:00", "id": "RST:6DCE137B-ACF7-3F9A-89F4-EB2F03C9E11C", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 71.7.255.193", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **66[.]103.62.25** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **37**.\n First seen: 2021-01-29T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **shellprobe, generic**.\nASN 11260: (First IP 66.103.32.0, Last IP 66.103.63.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Simcoe\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-01-29T00:00:00", "id": "RST:7301642C-DE9E-3DA6-9DED-FDC12041C5D0", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 66.103.62.25", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **96[.]30.152.122** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **43**.\n First seen: 2021-02-16T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **shellprobe**.\nASN 11260: (First IP 96.30.128.0, Last IP 96.30.186.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Belnan\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-16T00:00:00", "id": "RST:A02811C0-CCF1-3E23-B777-11D5C17E612F", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 96.30.152.122", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **24[.]89.192.144** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **42**.\n First seen: 2021-02-15T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **shellprobe**.\nASN 11260: (First IP 24.89.192.0, Last IP 24.89.255.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Yarmouth\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-15T00:00:00", "id": "RST:D22F65C0-A7FD-3823-B268-200D680C2387", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 24.89.192.144", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **24[.]89.244.131** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **37**.\n First seen: 2021-02-07T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **shellprobe**.\nASN 11260: (First IP 24.89.192.0, Last IP 24.89.255.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Sydney\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-02-07T00:00:00", "id": "RST:A6418CF2-94C6-37C4-AA98-125FE6F9613D", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 24.89.244.131", "type": "rst", "cvss": {}}, {"lastseen": "2021-02-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **24[.]89.252.195** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **31**.\n First seen: 2021-01-28T03:00:00, Last seen: 2021-02-22T03:00:00.\n IOC tags: **shellprobe**.\nASN 11260: (First IP 24.89.192.0, Last IP 24.89.255.255).\nASN Name \"EASTLINKHSI\" and Organisation \"EastLink\".\nASN hosts 2307 domains.\nGEO IP information: City \"Sydney\", Country \"Canada\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-01-28T00:00:00", "id": "RST:09C6A3A0-12F1-3B4A-A9A2-C4D2FC9F0C50", "href": "", "published": "2021-02-23T00:00:00", "title": "RST Threat feed. IOC: 24.89.252.195", "type": "rst", "cvss": {}}]}