First published: Wed May 19 2004(Updated: )
The libpng package contains a library of functions for creating and<br>manipulating PNG (Portable Network Graphics) image format files. <br>Steve Grubb discovered a out of bounds memory access flaw in libpng. An<br>attacker could carefully craft a PNG file in such a way that it would cause<br>an application linked to libpng to crash when opened by a victim. This<br>issue may not be used to execute arbitrary code. <br>Users are advised to upgrade to these updated packages that contain a<br>backported security fix not vulnerable to this issue.
Affected Software | Affected Version | How to fix |
---|---|---|
libp2p |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2004:180 is classified as important due to the potential for remote code execution.
To fix RHSA-2004:180, you should update the libpng package to the latest version available in your distribution's repository.
The vulnerability in RHSA-2004:180 is caused by an out of bounds memory access flaw in the libpng library.
The vulnerability in RHSA-2004:180 was discovered by researcher Steve Grubb.
RHSA-2004:180 can be exploited to conduct remote code execution attacks through specially crafted PNG files.