Red Hat Security AdvisoryRHSA-2010:0534
libpng security update
Released 2010-07-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libpng-2:1.2.2-30, libpng-2:1.2.2-30.i386, libpng-devel-2:1.2.2-30 +5
- Red Hat Enterprise Linux (v. 5 server) libpng-2:1.2.10-7.1.el5_5.3, libpng-2:1.2.10-7.1.el5_5.3.i386, libpng-2:1.2.10-7.1.el5_5.3.ia64 +5
- Red Hat Enterprise Linux AS version 3 libpng-2:1.2.2-30, libpng-2:1.2.2-30.i386, libpng-2:1.2.2-30.ia64 +13
- Red Hat Enterprise Linux AS version 4 libpng-2:1.2.7-3.el4_8.3, libpng-2:1.2.7-3.el4_8.3.i386, libpng-2:1.2.7-3.el4_8.3.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libpng-2:1.2.10-7.1.el5_5.3, libpng-2:1.2.10-7.1.el5_5.3.i386, libpng-devel-2:1.2.10-7.1.el5_5.3.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libpng-2:1.2.10-7.1.el5_5.3, libpng-devel-2:1.2.10-7.1.el5_5.3, libpng-devel-2:1.2.10-7.1.el5_5.3.i386
- Red Hat Enterprise Linux Desktop version 4 libpng-2:1.2.7-3.el4_8.3, libpng-2:1.2.7-3.el4_8.3.i386, libpng-devel-2:1.2.7-3.el4_8.3 +5
- Red Hat Enterprise Linux ES version 3 libpng-2:1.2.2-30, libpng-2:1.2.2-30.i386, libpng-2:1.2.2-30.ia64 +9
- Red Hat Enterprise Linux ES version 4 libpng-2:1.2.7-3.el4_8.3, libpng-2:1.2.7-3.el4_8.3.i386, libpng-2:1.2.7-3.el4_8.3.ia64 +9
- Red Hat Enterprise Linux WS version 3 libpng-2:1.2.2-30, libpng-2:1.2.2-30.i386, libpng-2:1.2.2-30.ia64 +9
- Red Hat Enterprise Linux WS version 4 libpng-2:1.2.7-3.el4_8.3, libpng-2:1.2.7-3.el4_8.3.i386, libpng-2:1.2.7-3.el4_8.3.ia64 +9
Fixes 4 records
Priority HIGH 71
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.43382 · Published 2010-06-30 · Fixed CWE-120
Priority LOW 34
Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing malformed Physical Sca…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02628 · Published 2010-06-30 · Fixed CWE-401
Priority LOW 27
The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large unco…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04498 · Published 2010-03-03 · Partial fix CWE-400
Priority LOW 24
libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might allow remote a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02278 · Published 2009-06-12 · Partial fix CWE-200
THREATIST.IORead the docs