REDHAT-BUG-799000
First published: Thu Mar 01 2012(Updated: )
A type conversion flaw leading to an out-of-bounds heap buffer read was found in the way libpng, a library of functions for manipulation PNG image format files, performed expansion of certain iCCP, iTXt, and zTXt PNG image file chunks. A remote attacker could provide a specially-crafted Portable Network Graphics (PNG) image file, which once opened in an application, linked against libpng, could lead to denial of service or in some cases, execution of arbitrary code with permission of the user running such an application. Upstream patch: <a href="http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=a8c319a2b281af68f7ca0e2f9a28ca57b44ceb2b#patch3">http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=a8c319a2b281af68f7ca0e2f9a28ca57b44ceb2b#patch3</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libp2p |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng;a=commitdiff;h=a8c319a2b281af68f7ca0e2f9a28ca57b44ceb2b#patch3
- http://src.chromium.org/viewvc/chrome?view=rev&revision=125311
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=801667
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=801665
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=801666
- https://rhn.redhat.com/errata/RHSA-2012-0407.html
- https://bugzilla.redhat.com/show_bug.cgi?id=799000
Frequently Asked Questions
What is the severity of REDHAT-BUG-799000?
The severity of REDHAT-BUG-799000 is classified as moderate due to the potential for an out-of-bounds heap buffer read.
How do I fix REDHAT-BUG-799000?
To fix REDHAT-BUG-799000, update to the latest version of libpng that has addressed the vulnerability.
Who is affected by REDHAT-BUG-799000?
Users and systems utilizing vulnerable versions of libpng are at risk of being affected by REDHAT-BUG-799000.
What kind of attack can exploit REDHAT-BUG-799000?
A remote attacker can exploit REDHAT-BUG-799000 by providing specially-crafted PNG files to trigger the vulnerability.
Is there a known exploit for REDHAT-BUG-799000?
As of now, there is no publicly known exploit specifically targeting REDHAT-BUG-799000.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-3045
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/libpng
- canonical/libp2p