SourceMage Grimoire Bug List

[bugzilla-daemon AT bugs.sourcemage.org]

http://bugs.sourcemage.org/show_bug.cgi?id=14716

           Summary: [SA31781] libpng "png_push_read_zTXt()" Off-By-One
                    Vulnerability
           Product: Codex
           Version: stable grimoire
          Platform: All
               URL: http://secunia.com/advisories/31781/
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: libs
        AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
        ReportedBy: ryuji AT sourcemage.org


CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
libpng 1.x

DESCRIPTION:
A vulnerability has been reported in libpng, which can be exploited
by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an off-by-one error within the
"png_push_read_zTXt()" function in pngread.c when processing
malicious PNG images with specially crafted zTXt chunks, which can be
exploited to crash an application using the library.

The vulnerability was reportedly introduced in version 1.2.30beta04
and is reported in version 1.2.31. Other versions may also be
affected.

Note: An off-by-one error in pngtest.c was also fixed.

SOLUTION:
Fixed in version 1.2.32beta01.

PROVIDED AND/OR DISCOVERED BY:
Harald van Dijk

ORIGINAL ADVISORY:
http://sourceforge.net/project/shownotes.php?release_id=624518

http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624


-- 
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.