Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 14716] New: [SA31781] libpng "png_push_read_zTXt()" Off-By-One Vulnerability

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 14716] New: [SA31781] libpng "png_push_read_zTXt()" Off-By-One Vulnerability
  • Date: 9 Sep 2008 02:34:15 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=14716

Summary: [SA31781] libpng "png_push_read_zTXt()" Off-By-One
Vulnerability
Product: Codex
Version: stable grimoire
Platform: All
URL: http://secunia.com/advisories/31781/
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P3
Component: libs
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: ryuji AT sourcemage.org


CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
libpng 1.x

DESCRIPTION:
A vulnerability has been reported in libpng, which can be exploited
by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an off-by-one error within the
"png_push_read_zTXt()" function in pngread.c when processing
malicious PNG images with specially crafted zTXt chunks, which can be
exploited to crash an application using the library.

The vulnerability was reportedly introduced in version 1.2.30beta04
and is reported in version 1.2.31. Other versions may also be
affected.

Note: An off-by-one error in pngtest.c was also fixed.

SOLUTION:
Fixed in version 1.2.32beta01.

PROVIDED AND/OR DISCOVERED BY:
Harald van Dijk

ORIGINAL ADVISORY:
http://sourceforge.net/project/shownotes.php?release_id=624518

http://sourceforge.net/tracker/index.php?func=detail&aid=2095669&group_id=5624&atid=105624


--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.




Archive powered by MHonArc 2.6.24.

Top of Page