libpng Buffer Overflow in png_set_strip_alpha() Lets Users Deny Service
|
|
SecurityTracker Alert ID: 1015615
|
|
SecurityTracker URL: http://securitytracker.com/id?1015615
|
|
CVE Reference: CVE-2006-0481
(Links to External Site)
|
Date: Feb 13 2006
|
Impact: Denial of service via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 1.2.7 only
|
Description: A vulnerability was reported in libpng. A user can cause denial of service conditions.
A user can create a specially crafted PNG image that, when processed by an application using libpng, may cause libpng to crash.
The
vulnerability resides in the png_set_strip_alpha() function. The overflow is triggered when attempting to strip alpha channels
out of the image.
|
Impact: A user may be able to cause an application that uses libpng to crash.
|
Solution: The vendor has issued a fixed version (1.2.8), available at:
http://sourceforge.net/project/showfiles.php?group_id=5624
|
Vendor URL: libpng.sourceforge.net/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Mon, 13 Feb 2006 12:55:09 -0500
Subject: libpng buffer overflow
|
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455
CVE-2006-0481
|
|
