Buffer overflow in libpng [LWN.net]

Package(s):

libpng

CVE #(s):

CAN-2002-0728 CAN-2002-0660

Created:

August 20, 2002

Updated:

August 20, 2002

Description:

Versions of libpng prior to 1.0.14 contain a buffer overflow in the progressive reader when the PNG datastream contains more IDAT data than indicated by the IHDR chunk. Such deliberately malformed datastreams would crash applications that are linked to libpng and that use the progressive reading feature. (From the Red Hat alert).

Alerts:

Yellow Dog	YDU-20020819-2	2002-08-19
Eridani	ERISA-2002:039	2002-08-19
Red Hat	RHSA-2002:151-21	2002-08-14
Mandrake	MDKSA-2002:049	2002-08-13
Debian	DSA-140-2	2002-08-05
Debian	DSA-140-1	2002-08-01

(Log in to post comments)