Description
Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libpng1.6 | 1.6.10-1 | — |
| Debian 13 | libpng1.6 | 1.6.10-1 | — |
| Debian 12 | libpng1.6 | 1.6.10-1 | — |
References
- http://sourceforge.net/p/libpng/bugs/199/
- openSUSE-SU-2014:0604 vendor-advisory
- 67344 vdb-entry
- [oss-security] 20140410 CVE-2013-7353 CVE-2013-7354 libpng integer overflows mailing-list