libpng, libpng3: buffer overflow [LWN.net]

Package(s):

libpng, libpng3

CVE #(s):

CAN-2002-1363

Created:

December 19, 2002

Updated:

July 14, 2004

Description:

Glenn Randers-Pehrson discovered a problem in connection with 16-bit samples from libpng, an interface for reading and writing PNG (Portable Network Graphics) format files. The starting offsets for the loops are calculated incorrectly which causes a buffer overrun beyond the beginning of the row buffer.

Alerts:

Gentoo	200407-06	2004-07-08
OpenPKG	OpenPKG-SA-2004.030	2004-07-06
Mandrake	MDKSA-2004:063	2004-06-29
Whitebox	WBSA-2004:249-01	2004-06-21
Fedora	FEDORA-2004-176	2004-06-18
Fedora	FEDORA-2004-174	2004-06-18
Fedora	FEDORA-2004-175	2004-06-18
Fedora	FEDORA-2004-173	2004-06-18
Red Hat	RHSA-2004:249-01	2004-06-18
Conectiva	CLA-2003:564	2003-01-23
Mandrake	MDKSA-2003:008	2003-01-20
OpenPKG	OpenPKG-SA-2003.001	2003-01-15
Yellow Dog	YDU-20030114-2	2002-01-14
SuSE	SuSE-SA:2003:0004	2003-01-14
Red Hat	RHSA-2003:006-06	2003-01-09
Debian	DSA-213-1	2002-12-19

(Log in to post comments)