Описание
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 1.2.8rel-5ubuntu0.3 |
| devel | not-affected | 1.2.15~beta5-3 |
| edgy | released | 1.2.8rel-5.1ubuntu0.3 |
| feisty | released | 1.2.15~beta5-1ubuntu1.1 |
| gutsy | released | 1.2.15~beta5-2ubuntu0.1 |
| upstream | released | 1.0.29 and 1.2.21 |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 ...
Certain chunk handlers in libpng before 1.0.29 and 1.2.x before 1.2.21 allow remote attackers to cause a denial of service (crash) via crafted (1) pCAL (png_handle_pCAL), (2) sCAL (png_handle_sCAL), (3) tEXt (png_push_read_tEXt), (4) iTXt (png_handle_iTXt), and (5) ztXT (png_handle_ztXt) chunking in PNG images, which trigger out-of-bounds read operations.
ELSA-2007-0992: Moderate: libpng security update (MODERATE)
EPSS
5 Medium
CVSS2