Description
Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image.
References
- ADV-2008-1371 vdb-entry
- SUSE-SR:2008:011 vendor-advisory
- 28937 vdb-entry
- kde-khtml-png-bo(42038) vdb-entry
- 1019929 vdb-entry
- http://www.kde.org/info/security/advisory-20080426-1.txt
- 29980 third-party-advisory