Description
Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name".
References
- GLSA-200607-06 vendor-advisory
- 18698 vdb-entry
- MDKSA-2006:209 vendor-advisory
- 22956 third-party-advisory
- 22958 third-party-advisory
- 20060719 rPSA-2006-0133-1 libpng mailing-list
- SUSE-SR:2006:028 vendor-advisory
- ADV-2006-2585 vdb-entry
- ADV-2008-0924 vdb-entry
- 23335 third-party-advisory
- 29420 third-party-advisory
- APPLE-SA-2008-03-18 vendor-advisory
- MDKSA-2006:210 vendor-advisory
- GLSA-200812-15 vendor-advisory
- MDKSA-2006:213 vendor-advisory
- MDKSA-2006:212 vendor-advisory
- http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123
- SUSE-SR:2006:016 vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- 33137 third-party-advisory
- https://issues.rpath.com/browse/RPL-517
- MDKSA-2006:211 vendor-advisory
- 20960 third-party-advisory
- libpng-pngdecompresschunk-bo(27468) vdb-entry
- 22957 third-party-advisory