Libpng 'pngrtran' Offset Buffer Overflow May Let Remote Users Deny Service or Execute Code Via Affected Applications
|
|
SecurityTracker Alert ID: 1010548 |
|
SecurityTracker URL: http://securitytracker.com/id/1010548
|
|
CVE Reference:
CAN-2002-1363
(Links to External Site)
|
Date: Jun 21 2004
|
Impact:
Denial of service via network, Execution of arbitrary code via network
|
|
Version(s): 1.2.5
|
Description:
A buffer overflow vulnerability was reported in libpng. A remote user may be able to cause an application that uses the affected library code to crash or execute arbitrary code.
In May 2004, the vendor reported that libpng does not properly calculate certain offsets.
The flaw resides in 'pngrtran.c'.
|
Impact:
A remote user may be able to cause an application that uses the affected library code to crash or execute arbitrary code. The specific impact depends on the application that uses the affected library.
|
Solution:
The vendor has issued a patch for version 1.2.5:
http://www.libpng.org/pub/png/src/libpng-1.2.5-patch2-pngrtran.CAN-2002-1363.diff
|
Vendor URL: www.libpng.org/pub/png/libpng.html (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Sun, 20 Jun 2004 13:42:28 -0400
Subject: CAN-2002-1363
|
http://www.libpng.org/pub/png/libpng.html
Patch for 1.2.5:
http://www.libpng.org/pub/png/src/libpng-1.2.5-patch2-pngrtran.CAN-2002-1363.diff
CVE: CAN-2002-1363
> Portable Network Graphics (PNG) libraries (1) libpng 1.2.1 and earlier, and (2) libpng3
> 1.2.5 and earlier, do not correctly calculate offsets, which allows remote attackers to
> cause a denial of service (crash) and possibly execute arbitrary code via a buffer
> overflow attack on the row buffers.
|
|
