Updated libpng packages that fix security issues are now available for Red Hat Enterprise Linux.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

A flaw was found in the handling of malformed images in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. (CVE-2007-2445)

A flaw was found in the sPLT chunk handling code in libpng. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was opened. (CVE-2006-5793)

Users of libpng should update to these updated packages which contain backported patches to correct these issues.

Red Hat would like to thank Glenn Randers-Pehrson, Mats Palmgren, and Tavis Ormandy for supplying details and patches for these issues.

The remote host is affected by the vulnerability described in GLSA-200705-24 (libpng: Denial of Service)

    Mats Palmgren fixed an error in file pngrutil.c in which the trans[]     array might be not allocated because of images with a bad tRNS chunk     CRC value.
  Impact :

    A remote attacker could craft an image that when processed or viewed by     an application using libpng causes the application to terminate     abnormally.
  Workaround :

    There is no known workaround at this time.

GNOME 2.0.0: libpng Patch.
Date this patch was last updated by Sun : Mar/19/12

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-002 applied. 

This update contains several security fixes for a number of programs.

Multiple vulnerabilities have been identified in libgd2, a library for programmatic graphics creation and manipulation. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-2445     Grayscale PNG files containing invalid tRNS chunk CRC     values could cause a denial of service (crash), if a     maliciously crafted image is loaded into an application     using libgd.

  - CVE-2007-3476     An array indexing error in libgd's GIF handling could     induce a denial of service (crash with heap corruption)     if exceptionally large color index values are supplied     in a maliciously crafted GIF image file.

  - CVE-2007-3477     The imagearc() and imagefilledarc() routines in libgd     allow an attacker in control of the parameters used to     specify the degrees of arc for those drawing functions     to perform a denial of service attack (excessive CPU     consumption).

  - CVE-2007-3996     Multiple integer overflows exist in libgd's image     resizing and creation routines; these weaknesses allow     an attacker in control of the parameters passed to those     routines to induce a crash or execute arbitrary code     with the privileges of the user running an application     or interpreter linked against libgd2.

ID	名稱	產品	系列	已發布	已更新	嚴重性
25256	CentOS 3 / 4 / 5 : libpng (CESA-2007:0356)	Nessus	CentOS Local Security Checks	2007/5/20	2021/1/4	medium
25383	GLSA-200705-24 : libpng: Denial of Service	Nessus	Gentoo Local Security Checks	2007/6/4	2021/1/6	medium
23367	Solaris 8 (sparc) : 114816-04	Nessus	Solaris Local Security Checks	2006/11/6	2021/1/14	medium
31605	Mac OS X Multiple Vulnerabilities (Security Update 2008-002)	Nessus	MacOS X Local Security Checks	2008/3/19	2018/7/14	critical
33552	Debian DSA-1613-1 : libgd2 - multiple vulnerabilities	Nessus	Debian Local Security Checks	2008/7/23	2021/1/4	medium

偵測

搜尋 Plugin

medium

medium

medium

critical

medium