Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

libpng: buffer overflow

Package(s):

libpng

CVE #(s):

CVE-2006-3334

Created:

July 19, 2006

Updated:

December 15, 2008

Description:

In pngrutil.c, the function png_decompress_chunk() allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow.

Alerts:

Gentoo	200812-15	2008-12-14
Mandriva	MDKSA-2006:213	2006-11-16
rPath	rPSA-2006-0133-1	2006-07-19
Gentoo	200607-06	2006-07-19

(Log in to post comments)