Vulnerability   
Search   
    Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.702439
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 2439-1 (libpng - buffer overflow)
Summary:Glenn-Randers Pehrson discovered a buffer overflow in the libpng PNG;library, which could lead to the execution of arbitrary code if a;malformed image is processed.
Description:Summary:
Glenn-Randers Pehrson discovered a buffer overflow in the libpng PNG
library, which could lead to the execution of arbitrary code if a
malformed image is processed.

Affected Software/OS:
libpng on Debian Linux

Solution:
For the stable distribution (squeeze), this problem has been fixed in
version 1.2.44-1+squeeze3. Packages for i386 are not yet available,
but will be provided shortly.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your libpng packages.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-3045
Debian Security Information: DSA-2439 (Google Search)
http://www.debian.org/security/2012/dsa-2439
http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075424.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075987.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075981.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075619.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076731.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076461.html
http://security.gentoo.org/glsa/glsa-201206-15.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2012:033
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14763
RedHat Security Advisories: RHSA-2012:0407
http://rhn.redhat.com/errata/RHSA-2012-0407.html
RedHat Security Advisories: RHSA-2012:0488
http://rhn.redhat.com/errata/RHSA-2012-0488.html
http://www.securitytracker.com/id?1026823
http://secunia.com/advisories/48320
http://secunia.com/advisories/48485
http://secunia.com/advisories/48512
http://secunia.com/advisories/48554
http://secunia.com/advisories/49660
SuSE Security Announcement: openSUSE-SU-2012:0432 (Google Search)
http://lists.opensuse.org/opensuse-updates/2012-03/msg00051.html
SuSE Security Announcement: openSUSE-SU-2012:0466 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00000.html
CopyrightCopyright (C) 2013 Greenbone Networks GmbH http://greenbone.net

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.