libpng: memory overwrite
| Package(s): | libpng | CVE #(s): | CVE-2014-9495 | ||||||||||||||||||||||||||||
| Created: | January 7, 2015 | Updated: | March 9, 2015 | ||||||||||||||||||||||||||||
| Description: | From the Mageia advisory:
libpng versions 1.6.9 through 1.6.15 have an integer-overflow vulnerability in png_combine_row() when decoding very wide interlaced images, which can allow an attacker to overwrite an arbitrary amount of memory with arbitrary (attacker-controlled) data. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||