PT-2014-1890 · Libpng+2 · Libpng+2
Publicado
2014-05-06
·
Atualizado
2025-06-09
·
CVE-2013-7353
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libpng versions prior to 1.5.14beta08
libpng versions prior to 1.6.10
Description
The issue is related to an integer overflow in the png set unknown chunks function, which can cause a denial of service, leading to a segmentation fault and crash. This can be triggered by a crafted image, resulting in a heap-based buffer overflow. The vulnerability can be exploited remotely, potentially disrupting the availability of protected information.
Recommendations
For versions prior to 1.5.14beta08, update to version 1.5.14beta08 or later.
For versions prior to 1.6.10, update to version 1.6.10 or later.
Correção
DoS
Heap Based Buffer Overflow
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Libpng