Описание
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
An array-indexing error was discovered in the png_convert_to_rfc1123() function of libpng. An attacker could possibly use this flaw to cause an out-of-bounds read by tricking an unsuspecting user into processing a specially crafted PNG image.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 4 | libpng | Will not fix | ||
| Red Hat Enterprise Linux 4 | libpng10 | Will not fix | ||
| Red Hat Enterprise Linux 5 | libpng | Will not fix | ||
| Red Hat Enterprise Linux 7 | libpng | Not affected | ||
| Red Hat Enterprise Linux 5 Supplementary | java-1.7.0-ibm | Fixed | RHSA-2016:0100 | 02.02.2016 |
| Red Hat Enterprise Linux 5 Supplementary | java-1.6.0-ibm | Fixed | RHSA-2016:0101 | 02.02.2016 |
| Red Hat Enterprise Linux 6 | libpng | Fixed | RHSA-2015:2594 | 09.12.2015 |
| Red Hat Enterprise Linux 6 Supplementary | java-1.7.1-ibm | Fixed | RHSA-2016:0099 | 02.02.2016 |
| Red Hat Enterprise Linux 6 Supplementary | java-1.6.0-ibm | Fixed | RHSA-2016:0101 | 02.02.2016 |
| Red Hat Enterprise Linux 7 | libpng12 | Fixed | RHSA-2015:2595 | 09.12.2015 |
Показывать по
Дополнительная информация
Статус:
EPSS
4 Medium
CVSS2
Связанные уязвимости
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1. ...
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
EPSS
4 Medium
CVSS2